I was asking because the parent post seemed to be concerned about untrusted Windows binaries. A VM gives you the ultimate sandbox (even if it's not perfect).