Ask HN: How to conveniently sandbox apps and dev environments on macOS

I clone and try lots of GitHub repos, macOS and terminal apps, npm and python packages as part of my work. I am worried about using the same user/session to also do my production dev work and my online banking etc.

How do you separate these things in your daily workflow?

With macOS you end up having to trust and grant a lot of permissions to untrusted code get things done, but most things don’t need to share the same environment, network, fs etc to function. How can I do this without going full on “QubesOS in a VM” route or constantly switching between users?