Firejail is dead simple.

Note that Linux has application firewalling built in as part of kernel namespaces.

Edit: forgot to add, new application containers such as snap have a built in system for this and more - just like how its done on phones.