navigate to chrome://sandbox to see if it's using SUID sandbox or user namespaces etc

# check if unprivileged user namespaces are enabled
sudo sysctl kernel.unprivileged_userns_clone