Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.
Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.