[elderbarry]

Snaps with a reasonable rationale for it can be unconfined (they require the user to acknowledge that with —classic on install). Think a config management system, which needs to be able to read and write all over a traditional file system. That would work for you, and be cross platform, but the snapcraft community would need to be convinced that it’s not a Trojan horse vector.