Lemongrab

Ente Auth

It is not security hardened from what I can tell. Most of Librewolf’s patches could be applied to build Zen with security hardening. Alternatively, patch Zen browser with Arkenfox user.js (upstream project to Librewolf’s security hardened default profile)

You can give a Flatpak the necessary permissions to modify disks. All the permissions needed by Veracrypt could be granted.