It's also possible to run a web browser in a docker container which can be interacted with on the host OS. This avoids the permissions issues with solutions like firejail:
https://blog.jessfraz.com/post/docker-containers-on-the-desk...
https://blog.jessfraz.com/post/docker-containers-on-the-desk...
https://docs.docker.com/engine/security/security/#docker-dae...
There are some blogs that talk about how to do this: https://blog.simos.info/how-to-easily-run-graphics-accelerat...