
Freemor at
Indeed, It's on by default on most of my systems. with a few things like browsers tightened up a bit more then the default configs do.
It's also great for debugging or temp account situations. A simple: filejail --private gets you a nice clean home folder to run whatever in.. Great if something is a config/plugin problem.