> Also, running a program is the most basic functionality of an OS and you suggest that I need to write my own sandbox to do this because it is not included with Linux. Maybe that is why this year still is not the year of Linux on desktop.

I'm saying other OSs are worse for sandboxing.

How would you achieve what you want on MacOS or Windows? (or others?), what do you think goes on behind the scenes?

I would set up a VM if i were that paranoid btw. Qemu, docker, deploy the container to it, vnc or gpu access.

Also, one question for you, since you brought up microphone, how do you defend from Microsoft/Google/Apple deciding to spy on you and access the microphone? (secret court order or who knows why in the future)