Comment by nextos

I think it's a compromise. Personally, I believe something like Firejail or bwrap can make your system much more secure while introducing minimal inconveniences.

Other things to consider are a userspace firewall and securing Xorg, which is kinda tough at the minute unless you migrate to Wayland.

The Unix security model is outdated, and we should be at the very least upgrading to something like that.