You point your browser at a local IP address or hostname and suddenly you have a full XFCE desktop running in your browser.
Run untrusted installers in a disposable Windows desktop. Add a simple config to lock it down, then close it to erase ...