The only places I've felt the pain were firefox, chrome, and eclipse. I'll check later to see what snaps are installed but the sandbox is mostly not noticed. The main issue is that the app with this biggest attack surface (Firefox) is also the one I explicitly want to access my whole system.

Chrome I only installed because ff didn't work, but it was no better.