Application Isolation with a Native Feel
How far an application is separated from the host depends on the engine and on what you share with it. Bubblewrap flakes are not a security boundary, and a Firecracker VM reaches the host data and network you connect it to. See Isolation and Its Limits and Privileges and Trust before running untrusted code.