It doesn’t use any seperate layers of containerization other than flatpak. So if you don’t install it via flatpak, it won’t be sandboxed.
There is also no proper instance containerization (you can enable it in Bottles’s settings, but it’s marked as experimental and I’ve been unable to run a single application with it on), so an app installed on one instance in Bottles will have access to all other instances’ files.
It doesn’t use any seperate layers of containerization other than flatpak. So if you don’t install it via flatpak, it won’t be sandboxed.
There is also no proper instance containerization (you can enable it in Bottles’s settings, but it’s marked as experimental and I’ve been unable to run a single application with it on), so an app installed on one instance in Bottles will have access to all other instances’ files.