bwrap is as secure as you want it to be which I think is the primary advantage over anything else.