Comment by codethief

> The difficulty is the same as for current sandboxing efforts on desktop Linux though

You're right, that is a problem. However, the situation on Linux is even worse since you can't even nest sandboxes/containers in most real-world situations.