Comment by woadwarrior01

For developer desktops, there's firejail[1].

[1]: https://github.com/netblue30/firejail