1. A computer-implemented method, comprising: associating at least one application programming interface (API) with a first resource controlled by an operating system, the at least one API including executable instructions to access the first resource, the at least one API associated with at least one of a plurality of trust levels, the at least one of the plurality of trust levels indicative of a security level of the first resource; executing a first application in an isolation execution environment that is isolated from other executing applications and resources; requesting, by the first application, access to the first resource; in response to the request, determining a privilege level associated with the first application; based at least on a determination that the privilege level associated with the first application is a low privilege level and the trust level of the first resource is associated with a high trust level, denying the requested access to the first resource; and based at least on determining that privilege level associated with the first application is a low privilege level and the first resource is associated with a base trust level, invoking the at least one API in the isolation execution environment.