How is it better for this use case than just using rlimit?

I'm not sure about this specific use case, but a reason for using cgroupv2 over rlimit is that cgroup allows you to limit the resources of a _group_ of processes, which is handy if, say, your Python script uses the `subprocess` module.

have to say: i really like the idea of `firejail firefox` thanks for sharing that!