Bedrock Linux Sandboxing issues

Distro - Bedrock Linux 0.7.30Beta2 (Poki) on kernel 6.14.0_1
Strata - Arch

Due to the way some nonstandard distros like bedrock layer different filesystems, the removal of the --no-sandbox flag breaks compatability altogether.
Bedrock's permission layering across distros makes sandboxing very hard, and until now, this was the only way to run steam on it.

steam.sh[21003]: Running Steam on arch rolling 64-bit
steam.sh[21003]: STEAM_RUNTIME is enabled automatically
setup.sh[21054]: Steam runtime environment up-to-date!
steam.sh[21003]: Log already open
steam.sh[21003]: Using supervisor /home/van/.local/share/Steam/ubuntu12_32/steam-runtime/amd64/usr/bin/steam-runtime-supervisor
steam-runtime-check-requirements[21088]: W: Child process exited with code 1: bwrap: No permissions to creating new namespace, likely because the kernel does not allow non-privileged user namespaces. On e.g. debian this can be enabled with 'sysctl kernel.unprivileged_userns_clone=1'.

steam.sh[21003]: Error: Steam now requires user namespaces to be enabled.

This requirement is the same as for Flatpak, which has more detailed
information available:
https://github.com/flatpak/flatpak/wiki/User-namespace-requirements

namespacing is enabled and working, but because bedrock is a stupid distro, it just does not work for steam.
The easiest fix is to add the --no-sandbox flag back.
Thanks.

Start with steam.sh and the steam-runtime-check-requirements output, then trace how the bwrap namespace check enforces user namespaces. Compare that flow with the Bedrock Linux and Arch setup described here. Done means Steam can run on Bedrock without the reported sandbox failure while preserving the normal sandbox behavior elsewhere.