How can we enhance security of app through internet sandboxing?

[silicology1]

I suggested a two app model in the blog. But its makes the design complicated. Can we simplify it, making it bundled in a single app, and sandboxed files and folder module that is well audited by reviewers, and any naive developer can check if its properly sandboxed?

A command-line tool can also be built that takes the source code (e.g., Tauri source code) and provides security results, such as whether the app is properly internet sandboxed. It makes it easy to check the security.