[mike_hearn]

That's true which is why I abandoned that approach, but the original comparison was against Bubblewrap which has the same issues (yes with enough overlays you can make a semi-writable system into which you can install things but you can tunnel brew outside the sandbox also).

[xyzzy_plugh]

Bubblewrap does not really have these issues at all. It's pretty much full containerization.