Run untrusted installers in a disposable Windows desktop. Add a simple config to lock it down, then close it to erase ...
If you're not happy with the default Windows file manager, you're in luck because there are plenty of options that improve on the original.