I'd call it following the Unix philosophy instead of a workaround. > Make each program do one thing well. To do a new job, build afresh rather than complicate

I'd call it following the Unix philosophy instead of a workaround. > Make each program do one thing well. To do a new job, build afresh rather than complicate old programs by adding new "features". Both AppImage and Firejail do one thing and do it well, you can easily combine both and get what you want.