I don't think Linux will get pledge() for a long time, and this definitely won't do it in the general case either.

More specific critique of seccomp here: https://blog.habets.se/2022/03/seccomp-unsafe-at-any-speed.h...