It's super easy to run games as a user without access to important data. It's possible you could make that completely seamless with bwrap and gamescope for an embedded session, but I haven't looked much into that.

Of course no security tools work if the game is root.