[subscribed]

Linux doesn't sandbox anything at all, unless you go out of your way for Bazzite or accidently run something from Flatpak/Snap.