Root comment literally ended with > If you want to isolate a program, you need to do it on the OS level. Commenter further suggested bubblewrap and firecracke

Root comment literally ended with > If you want to isolate a program, you need to do it on the OS level. Commenter further suggested bubblewrap and firecracker elsewhere in the thread. “Just allow everything” is a straw man you pulled out of nowhere.