The Flatpak/XDG people are standardizing the concept of "portal"s for doing things that need help from outside the sandbox. A properly sandboxed Flatpak app can only open files bind-mounted for it via a portal call.