Distributors entering Flatpakland

Why can't a sandbox (say, firejail) can be used to provide sandboxing?

rpm packages could come with their profile and that's it. It'd be quite easy to change and inspect.