Excellent points. I haven't tried it yet, but the app Hermit has sandboxing as well and creates PWA-type apps out of websites. I've been using it for self hosted services that don't have and Android app component to them. Works reasonably well but I'm not trying to hide info....from myself :)