When I really need to run an app on my Linux laptop, it always gets its own bubblewrap container.