I use firejail to deny access to some folders.