So… I know the question depends on threat model, but…
Let’s say threat level is a little bit more than medium. So i need more software protections, than physical ones.
Is there anyone who using firejail? I am new to all this “sandboxing” but after news about chat control i started to think to lock things up.