Flatpak with OSTree or ABroot, the future is now. Although it would be nice if Silverblue would automatically create a container and install non-flatpak apps into it, then add desktop.ini files automatically: