Thanks, I see. From the title I didn't infer that it's browser or openssh specific but that's ok.

Fair point!

I should add that landlock just works, and that lots of the other sandboxing techs also work