Is the best solution then (in terms of what current Linux users probably want) to introduce permissions to existing repository applications? Best of both worlds

Is the best solution then (in terms of what current Linux users probably want) to introduce permissions to existing repository applications? Best of both worlds: reuse of system libraries, security updates to upstream packages without having to update the application itself, and pseudo-sandboxing for extra security.