My practical approach is to have a microvm for firefox and a bubblewrap “jail” for a firefox instance that runs on the host. Of course, the config options mentioned here are good too.

This sounds interesting and useful. How do you set something like this up? Are there good tutorials to follow?