I mean, you can use something like the lightweight containers generated by firejail, where the program just lacks write permission to the filesystem or network access, stuff like that.