I mean, I don’t disagree, but at some point it’s gotta change if one is going to ever be able to have desktop apps that run sandboxed. X was never designed to have untrusted and trusted apps running on the same desktop, and the ways of approximating that are non-ideal.

What WM are you using? If it’s sticking specific application windows on specific workspaces, i3 can do that:

https://i3wm.org/docs/userguide.html

And I understand that sway is mostly compatible with i3.