I would say most Linux desktops users are aggressively sandboxing everything. All my dev envs are sandboxed, trivially, Claude is sandboxed, and all my apps are flatpak. And I do actually revoke permissions for flatpaks often, although most are real good about it - using xdg-directory and such.

Maybe I’m a minority, but the tools are very mature and easy to use IMO. In windows land people are still installing random EXEs, that’s the reality.