All my Windows games that I launch from Lutris (which are most, since I tend to avoid Steam and prefer GOG) are launched by default inside a Firejail container configured amongst other things to have no networking enabled.
All you need to do for it is to setup a “command prefix” with firejail and its launch parameters at the Lutris level and it becomes the default one for all games.
It’s not just the drive letter mapping, Wine doesn’t make any attempt to secure software.
You can run Wine inside an actual security solution.
All my Windows games that I launch from Lutris (which are most, since I tend to avoid Steam and prefer GOG) are launched by default inside a Firejail container configured amongst other things to have no networking enabled.
All you need to do for it is to setup a “command prefix” with firejail and its launch parameters at the Lutris level and it becomes the default one for all games.