Thank you for this great article.
It inspired me to build a single bash script that handles the full sandbox lifecycle: profiles, persistent volumes, SSH, Privoxy proxy, and nftables firewall. Along the way I found that krun’s TSI bypasses nftables (fixed with krun.use_passt=1) and that krun always starts as root regardless of Dockerfile USER.