cc @wreckedcarzz@lemmy.world

I don't do as much as I should. I run Wine (which is NOT a sandbox!!!!) inside of Bottles (which sandboxes it a little bit; it at least prevents it from accessing the real filesystem and other programs I have installed) inside of Flatpak (which internally uses Bwrap for sandboxing, which is a legit sandbox when correctly configured, although probably isn't secure against really determined malware).

I probably should use a virtual machine, just to be safe. But I don't want the headache of setting that up or the performance penalty it comes with, and I decided I trust Fitgirl enough to not try harder than Bwrap.