Maybe I am vastly underestimating it, but I could imagine this being buildable atop of nix quite straightforward?
GUI apps on NixOS rarely care about sandboxing so while you can do it yourself i bet almost noone does. Flatpak is trying to give you basic protections out of the box.