Tag
Article advocates Firejail as a mature Linux sandboxing tool to restrict program network, filesystem and hardware access without needing new display tech like Wayland.