You are correct that Win32 apps were already supported in AppContainer. What's new here is that a handful of Win32 APIs are now slowly getting plumbed into the capability system. This means Win32 apps that currently ship packaged as needing "full trust" can, if supported, reduce the requested capabilities to those that are supported by Win32 App Isolation (e.g., "system tray access").