[kd913]

People could always use the snap versions of libreoffice/browsers and either limit access to the home directory or remove access to the network. It seems the easiest way of applying a Android permission based model to Linux.

Alternatively, there are also firejail profiles which could be used for restricting what these tools can do.

[panpanna]

The snap version has some limitations but I think that is the future.

And just because we maybe can contain it, it doesn't mean libreoffice devs should be off the hook for reading private keys from my drive.