Earlier quoted context omitted.
I recently needed to do some sound editing, and I had a dreadful experience with Tenacity. Running on PopOS, I encountered many crashes doing simple manipulations. Even trying to scroll while playing audio ostensibly resulted in a crash. Small favor, the restore-unsaved-work functionality did save me several times. Eventually, I held my nose and ran Audacity in a VM, and not a single crash.
Running in a VM is drastic. I'd go for bubblewrap, or a plain container. Can cut network access all right.
Barring a VM escape exploit, I know that my private data is not getting exposed.