OK. A lot more lightweight than VMs or containers or Qubes. BUT, even this improved version is hugely lacking in control. For example, there's no way to separate logins to different slack accounts, since they all use the app.slack.com hostname, and differentiate by path components in the URI. That's actually DANGEROUS to privacy, since it merges tabs you might not expect it to merge! False sense of security.