Unprivileged doesn't really mean anything. Since pretty much everything sensitive is running as a single user, having root doesn't really give much much that yo

Unprivileged doesn't really mean anything. Since pretty much everything sensitive is running as a single user, having root doesn't really give much much that you couldn't already do as the user. You're right that apparmour can help, but getting good profiles for the software you use is not easy, and I'd say less available than Flatpak.