Do you know if generic sandboxing tools exist? I feel like it should be possible to use Docker and some sort of Firewall to isolate your running application from your system if you're worried about it accessing things that it should be able to. And that way you don't need to worry about using deno or relying on the program being written in a certain framework/language.