> everyday Linux desperately needs a proper application management and security model. We already have the necessary tools to do it, eg. firejail. We only have

> everyday Linux desperately needs a proper application management and security model. We already have the necessary tools to do it, eg. firejail. We only have to make every binary run in firejail by default (and write firejail profiles for more binaries).