But irrelevant in this case. I dev on macOS. I’m not aware of any other options.
> It’s not any different
It's very different. With docker on Mac you're running a VM which runs a wrapped up complete system that runs your app.
With selinux/sandbox-exec you run just your app and can skip the extra packaging needed for docker and mounts. (And get the extra performance)
But irrelevant in this case. I dev on macOS. I’m not aware of any other options.