[goodpoint]

Firejail is by far the most mature for sandboxing desktop/phone applications.

It's available on Mobian and is shipped with hundreds of profiles for popular applications.

[kaba0]

I’m no security researcher but have read one who said that due to it being a setuid program, it can potentially turn a bug in firejail into an exploit with root access.