In the case of steam and web browser, the containerization means I can control their access permissions via flatseal. This adds another layer of security, since they're both web-accessing applications, and it's easier than setting up a VM to run those applications.