From a linked article[0], sandbox shares both memory pages and binaries with the host system. Which means it's always runs the exact same build as a host. Which means you can't use it to test Windows updates. Am I correct?

0. https://learn.microsoft.com/en-us/windows/security/threat-pr...