Even snap/flatpak frequently give flat-out full filesystem access, so the desktop is already insecure as heck and the security advantages are all theoretical.

Even snap/flatpak frequently give flat-out full filesystem access, so the desktop is already insecure as heck and the security advantages are all theoretical. It's like nitpicking what lock the door has when the window is left wide open.