@eric I tried learning how to use pipewire's "security" and it turns out the only security feature is an ad-hoc completely undocumented interface to flatpaks (that they swear will one day be an actual privilege separation feature)
if you don't use flatpaks pipewire is security-wise equivalent to pulseaudio