Yes, that would be vastly preferable. Normally, the client would still have access to quite a bit (Lots of $HOME for example, minus security sensitive files). I

Yes, that would be vastly preferable. Normally, the client would still have access to quite a bit (Lots of $HOME for example, minus security sensitive files). It would be possible for the packager to turn off that access too and completely lock it down, turning off those interfaces and providing a fake $HOME etc. A good reason for the packager to not be Zoom Corp, but getting a distribution license might be tricky.