[sedatk]

Putting apps in a container sounds like a great idea until you need to access your files.

[mike_hock]

Or until you realize X11 is one giant escape hatch. You might not have (convenient) access to your files but the attacker does.