I'd use a sandbox for Chrome then. You can use docker to spin up a temporary Chromium instance and then delete it after. It would have no visibility into your host filesystem. You can also just use a VM.