I remember back in the windows 7 days I had discovered Sandboxie that helped me a great deal. At the time my concern was the browser as javascript was just picking up and the engines to run it were all focusing on performance only. I don’t remember having to compile it manually, but that might actually be the safest way to ensure you don’t get a compromised installer.