I would recommend running untrusted proprietary software as a webapp if possible, it will not be able to be as intrusive in that case compared to native app even with all the sandboxing (flatpak, snap, etc…). Or Virtual machine as the most secure option, but it may be overkill.