They're painful to set up yourself, but that's pretty much true of all current sandboxing approaches. If you just let your distro do it and follow their conventions it you barely notice.
Re:Dotfile madness
by paulddraper on Monday February 04, 2019 @10:23AM
(#19076995)
> that's pretty much true of all current sandboxing approaches
Agreed.
But -- speaking from experience -- they are painful to use; most users prefer convenience over heightened security.