This is where I need to shout out to everyone's favorite developer Justine for keeping Linux cool:
Which also points to landlock-make[0] or vice-versa (the original project that made me aware of the kernel functionality (although didn't realize it also isolated network which is great).