It's always struck me that agents should be operated via `systemd-run` as a transient scope unit with the necessary security properties set

So couldn't this be done with an appropriate shell alias - at least under linux.

I had the same idea and created this quickly in an evening: https://github.com/Shadi/isolate