App sandboxing is indeed the way of the future, and being worked on by e.g. flatpak.