You could use a separate, limited user account for each project. You could also confine them to containers pretty easily, VSCode has some solid extensions for

You could use a separate, limited user account for each project. You could also confine them to containers pretty easily, VSCode has some solid extensions for SSH and container-based development.