[nequo]

Firejail gives more control over the boundaries of the sandbox. So deb + firejail seems superior to snaps to me from a security perspective.