They use a custom-made Firejail-based solution called SailJail: https://github.com/sailfishos/sailjail