Separate user account is a good start

[grand wolf]

yes and no. most basic users in modern OS (MacOs, Linux) don;t ahve the capabilities to capture network traffic. Yes Docker gives you more isolation but it is also more complicated to setup. Sometimes a good enough solution that provides 90% of the security but is accessible to 100% of users is the way to go 🙂

[trail copper]

Good point, 90% with zero friction is a solid tradeoff. Although docker has gotten pretty painless lately though, most setups are a single command away from full isolation.