This doesn't address what they just said - dropping privileges incrementally. Firejail is just a whole process filter applied at process start.