Comparing Guix containers and firejail

[kiasoc5]

Hi Guix,

Someone on firejail Github discussions [1] wants to know the difference between 
guix containers and firejail.

1. How does guix shell --container compare to firejail in terms of 
sandboxing/security? Are guix containers intended to be secure?

2. Containers are still experimental, are there any features that could be 
added to increase security?

Thanks!

[1] https://github.com/netblue30/firejail/discussions/5057