There are many things that would be good to lock down. NPM install comes to mind.

I wonder if I will be able to integrate this with dev containers somehow, so my dev container could run in stricter isolation.

I've seen folks using the VS Code workspaces concept for this. It's a bit limited but a good step in the direction I prefer.