[Feature] Full sandboxing of an application

[kravemir]

Is your feature request related to a problem? Please describe.

I want to regularly run a proprietary audio streaming application I don't particularly trust.

And, I don't want to have my data leaked or have system compromised any other way.

Describe the solution you'd like.

Full sandboxing of an application - no shared data, no access to host, no privilege escalation, no nothing,...

Describe alternatives you've considered.

Run a virtual machine, and waydroid in it. Not very practical, though.

Additional context

No response