One is not like the others - firejail is aimed at more of desktop type applications you interact with, where the others can do so but are more suited for arbitrary workloads.

A parent comment mentions ebpf syscall interception, many end up combining gvisor and nsjail and seccomp.