I'm reading on snapcraft that most snap packages use "strict" confinement, which means that they "run in complete isolation, up to a minimal access level that’s

I'm reading on snapcraft that most snap packages use "strict" confinement, which means that they "run in complete isolation, up to a minimal access level that’s deemed always safe. Consequently, strictly confined snaps can not access your files, network, processes or any other system resource without requesting specific access via an interface." Sounds like a container to me, and it's not how Nix does things.