#asknostr

If i wanted tp use google services on my graphene OS, best practice is to make a new user and use those services within that 'google only' user. Is that what sandboxing is ? Thank you.