Trying to just once in this life run some AppImage in a safe and "normal" way, namely using firejail, has brought me back to trying out the same features in the square 0 way, under my app-exploring Ubuntu VM.
Sometimes it's just the way it is [sigh].
Mounting appimage type 2
Reading profile /etc/firejail/default.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Warning: networking feature is disabled in Firejail configuration file
** Note: you can use --noprofile to disable default.profile **
Parent pid 71491, child pid 71493
** Warning: dropping all Linux capabilities **
Child process initialized in 109.11 ms
/bin/bash: /run/firejail/appimage/.appimage-71491/AppRun: Permission denied
Parent is shutting down, bye...
AppImage unmounted
One disturbing question may arise ... it's not much of a first version - hasn't anyone before me tried doing this? With other apps I did find it achievable.
I'll give kdenlive a go before firing up the VM, just to see if I have a fallback.
UPDATE
The kind procedure of firejailing the almighty kdenlive has been terminated at the point I had been looking for GLIBCXX_3.4.29 for over 30 seconds to no avail. I am indeed uncertain this needs to be part of the ritual to just safely run an app.
Among the other equally prompting messages I was gifted this. Thank you.
/run/firejail/appimage/.appimage-74408/AppRun.wrapped: /usr/lib/x86_64-linux-gnu/libstdc++.so.6: version `GLIBCXX_3.4.29' not found (required by /run/firejail/appimage/.appimage-74408/usr/bin/../lib/libQt6QuickTemplates2.so.6)
Sticking with the VM version for this one (although the snapped might exist and not be too outdated and work for the particular purpose, too - I do not know that).