&gt;Sandboxes make a much better security primitive than sudo, file permissions, etc. which are useless for protecting a single user’s data.<p>Is not only sudo, but sudo AND polkit.  Are you sure you know what are you talking about?<p>And about your sensitive data, AppArmor is more than capable. For the other sensitive data, create a folder out of &#x2F;home and &quot;chattr +i&quot; your content recursively, giving proper permissions first.<p>And you rely in Plan9 for your speech, which is more UNIXy than UNIX and everything IS a filesystem in a more hardcore way (something you look as obsolete), altough factotum and namespaces are a complete different beast.