I want to run certain applications that are Windows only, and I wanted to know if there is any sand boxing as most of the programs that are Windows only tend to be invasive. I know VMs are another option but there is usually a performance toll with that and I am running a low to mid range laptop
By default Windows apps primarily have access within their own wineprefix and otherwise have access to the main file structure through an internal “Z” drive.
You can sandbox themselves from each other further by creating a wineprefix for each app using something like Winetricks or PlayonLinux.