Flatpak gives you a lot of permission controls for GUI apps and you can similarly sandbox a lot of CLI tools with toolbx or distrobox.