Flatpak works fine for this. The discord flatpak only has access to my downloads. If I want to tweak that, I run the flatpak customizer UI. It's sort of vaguely

Flatpak works fine for this. The discord flatpak only has access to my downloads. If I want to tweak that, I run the flatpak customizer UI. It's sort of vaguely annoying to have to restart the app. Or I just run it in docker and only mount what I want. No VM overhead since cgroups are native.