Comment by bigyabai

> it doesn't have any kind of proper desktop sandboxing architecture that really works.

Bubblewrap works.