You could use a separate, limited user account for each project.

You could also confine them to containers pretty easily, VSCode has some solid extensions for SSH and container-based development.