I exclusively run web browsers in flatpak

I love that no firefox or chromium process has access to e.g. ~/.ssh or /etc or any number of other things a web browser has no business accessing

It’s not feasible to read the source code for every application I run now, so anything that makes sandboxing convenient and simple is very much appreciated