> Ubuntu snaps are not sandboxed yet [1] That's quite a blanket statement: of course they are. Snaps are sandboxed by a set of interfaces requested by the snap

> Ubuntu snaps are not sandboxed yet [1] That's quite a blanket statement: of course they are. Snaps are sandboxed by a set of interfaces requested by the snap in question. If the snap requests networking, it gets networking. If it wants to access the sound card, it gets the sound card. Some of these interfaces are more powerful/dangerous than others. If the snap requests X, it gets X. That makes that particular snap certainly less safe, but it says nothing about snaps that don't use the X interface at all. The user can also disallow access to X (though that probably makes the application less useful) by disconnecting that interface: snap disconnect <snapname>:x11