Still some work to have proper confinement in practice for apps in the Flatpak ecosystem.

The design proposed is a bit too clear cut for my case. Other than that it's fairly aligned with what I preach.