From a security standpoint, yes they can be broken out of, just like a docker or a virtual machine , but they use bubblewrap to isolate environments just like flatpaks. Malicious content aside they are just as isolated and sandboxed as a docker image or vm

I’m still burnt about this. I’ve been a subscriber since they started Linux support. Cancelling it last week sucked but I definitely let them know why during the process. It did a great job managing cp2077 mods on Linux.

Yes, it has different wine instances for each installed application, it uses a flatpak style separation to prevent them from accessing each other.