It's distrobox, so an LXC container per app.

User filesystem is totally transparent.