This is true. I wrote a sandbox for applications shipped on an immutable distro last month and it uses all the same portals just fine but no ostree/flatpak whatsoever.

You also can have separate portals implemented with different processes if you, you know, use d-bus properly.