Maybe we could develop trustworthy free-software applications again, instead of trying to establish a commercial apps ecosystem on top of Linux?

Amutable. Building an immutable and image based system which even the installer can't modify, a-la macOS.

One systemd patch at a time.

AppImage is not a sandbox