> Will you just blanket-restrict all packages to the strictest security measures? Seems like a reasonable default to me. And indeed, that seems to be more or

> Will you just blanket-restrict all packages to the strictest security measures? Seems like a reasonable default to me. And indeed, that seems to be more or less exactly what Firejail does if it doesn't have a profile already for an application: https://firejail.wordpress.com/documentation-2/ https://firejail.wordpress.com/documentation-2/