Windows handled this via virtualization[0]. What you assume is false because it was specifically planned for by Microsoft.
[0] https://learn.microsoft.com/en-us/windows/security/applicati...
[0] https://learn.microsoft.com/en-us/windows/security/applicati...
'planned' is a bit strong when it had to be added after the fact.