Yes! Behind the scenes, WSL has the same security story of a VM. Of course, every rule you apply to your users with VMs will apply to VM as well. Windows host can't see what's running on WSL. for example, Defender on Windows cannot read WSL process. There are some improvements we're working on to give a more granular controls for enterprises.