Comment by bpavuk

and Landlock! Pi even has a sandbox plugin for Landlock