I find the lutris is actually a pretty excellent experience. Most games have a method to install themselves with it, it integrates nicely with my gog library, and it really does just work. You can edit the prefix dosdevices to deny access to the filesystem outside of the prefix.