To add on to this, if you are using flatpak apps and want granular permission control, check out flatseal. Fedora (IMO) has one of the best flatpak integrations out of the box. Other "sandboxing" or containerized app deployments are snaps (made by Canonical), and appimage (I'm not entirely sure this qualifies as an app container).
From my experience, flatpaks is currently leading in adoption when compared to the other two.
Thanks! Flatpak-KCM is perfect as I'm thinking I'll move to fedora KDE in a couple days when f40 drops. I'm hoping that the Wayland experience on NVIDIA GPUs will be smoother there than on GNOME.