From my knowledge its a yes and no. One of the "benefits" of bwrap was that it was a SUID binary and thus maximised compatibility with systems that disabled unp

From my knowledge its a yes and no. One of the "benefits" of bwrap was that it was a SUID binary and thus maximised compatibility with systems that disabled unprivileged user namespaces. With that barrier gone you can implement a more tailored sandbox to the usecase instead of working around limitations in bwrap. Like, all things considered, bubblewrap as a whole isn't that much code (quick check seems like ~6k LOC) and does somewhat limit the API you can work with.