I use Docker and apt instead. The definition of an application lives in a single text file and you don't give it anymore resources or permissions than it needs.
So much so, that I wrote a bunch of scripts to make life easier, without ever needing to go anywhere near appimage, flatpak or snap.