Install Firejail with the X11 flag?

[ayeyes]

Lots of dependencies, should I?

[Ant P.]

Looks like those are all required deps for xpra. You can omit it but then your X apps aren't sandboxed and can potentially do evil things like silently recording all input and output. If you don't want that the next-safest option would be to run them in an XWayland or Xephyr window manually.

[ayeyes]

Thank you! I'm running Firejail and is happy with that.