I really need to figure out a better sandboxing method for shells. It's crazy to be things where my keys, browser data, shell history are all accessible.

I do try to use firejail where possible, but it's quite cumbersome. Every so often I look for tools to help with this, but everything is oriented around making a specific program (e.g. Firefox, steam) work.