App Sandboxing

Recently there were a few security advisories, but none of them is affecting Qubes OS.

I’m not familiar with anything else that could exploit Xen in this case.