You've basically just described Linux mount namespaces. Flatpak and snap applications each see a virtual root directory which grants no visibility into the user

You've basically just described Linux mount namespaces. Flatpak and snap applications each see a virtual root directory which grants no visibility into the user's home directory by default. D-bus services called "portals" then grant access to individual files upon user consent.