X11 is pretty poor for security, you should use Flatpak as it has sandboxing and still stores all its files in one directory.