Distrobox is a better fit for this meme. Without it, one needs to manually configure devices and namespaces. Which is not that difficult, but distrobox create makes it trivial.

Flatpak provides similar sandboxing capabilities and you can use TopGrade to manage all updates.