A compatibility layer like Wine is not a replacement for a true sandbox. Although Wine may have some basic sandboxing capabilities, the default wine configuration grants access to your home directory, which something like ransomware could take advantage of.
Confetti_Camouflage
Chromebooks are locked down yes, but they do give you the keys. It involves unplugging the internal battery to be able to modify the hardware write protection, entering dev mode to disable the write protection, and then flashing a Coreboot port onto the firmware. Even then, a lot of basic things may or may not work once you're booted into Linux. From experience I don't recommend.
Installing Linux bare onto a Chromebook involves unplugging the internal battery (or buying a cheap special USB thing) to disable the hardware write protection and flashing a custom BIOS. Some models have issues with basic things like sound output not working through speakers or headphones or both. From experience I don't recommend.
If you still really want to though there are two websites that are really useful and should have up to date information.
WatchParty works fine for watching YouTube together but uploading to your friends requires Chrome. I've also never been able to get video working with mkv files. Webm works but I've never seen a release in a webm container.
You should try the Shimmer userchrome tweaks along with the Sideberry extension. With both of them it's even better than Zen IMO.