Could & should things be better by default? Sure, but in practice, all of the proprietary software I don't trust but need to run for work all have a web app tha

Could & should things be better by default? Sure, but in practice, all of the proprietary software I don't trust but need to run for work all have a web app that is sandboxed in the browser which is generally good enough for my threat models. Hilarious though that the author thinks is Nix is “imcomprehensible”. You can even do things like nix shell nixpkgs#proprietary-crap and ditch the application after using it to do one thing.