Isn't that what Docker, firejail, nsjail, flatpak and others already achieve...?