Sandboxing is cool, but I think isolation should be the default, not the exception. I’m planning to put all (non system critical) apps in userspace and make the default permissions limited