I do not see any value proposition in this - if I need a sandbox, I make one with Dockerfile, Bubblewrap or virtualization. What I am missing? An enforced required login is a net negative value - it means rug pulls in the future.
On Linux I am using https://github.com/wrr/drop which configures bubblewrap based on a simple yaml config specific for the project path and it is enough for me.