Any references to how you use selinux? I've used bwrap and firejail, but I don't feel confident that I'm not leaving holes open?
If you're happy with firejail, make sure you use whitelists only and you'll be 90% there with what's possible to achieve.