Windows 11 does have features that enhance security, including the ability to run Microsoft Defender Antivirus in a sandbox environment. This helps isolate potentially harmful applications from affecting the rest of the system. To enable sandboxing for Microsoft Defender Antivirus, you can set a machine-wide environment variable which allows the antivirus to operate in a more secure manner. However, there is no built-in feature specifically designed to flag applications that open terminal or command prompt automatically.
For your suggestion about enhancing security to fully sandbox applications and flagging terminal access, it would be best to provide feedback directly to Microsoft through their feedback channels, as they consider user suggestions for future updates.
References: