That is all really useful info to have. Google Play Games for Windows uses their own crosvm sandbox, which has a couple---but not many---hack-a-rounds to run regular apps & for Houdini (ARM translation). And Android source code makes multiple mentions of a container-based Android sandbox. What sucks is that Microsoft discontinued WSA & that Google won't release a modern standard desktop-based Android layer because it is so "security-concious" (aka fragile) that they are worried about users abusing the APIs it exposes.