I tried bazzite but ended up on cachyos. The whole layered / immutable thing got a bit annoying. I'd rather just run snapshots and manage my packages more traditionally
In Fedora Atomic it should be foolishly easy to set up a system account, with access to specific USB devices via group, and attach a volume that can easily be written to by a non-root user inside of the container.