Use Bottles with the Sandbox option enabled (and sound enabled). So, native performance but without access to files outside the Wine prefix (virtual Windows folder where the game is installed) and without network access. This way, you don’t have to worry about games phoning home, containing a crypto miner or ransomware.
Also, forget about FitGirl repacks on Linux, most don’t unpack correctly.
Everything Everywhere All at Once