diff --git a/hosts/common/programs/assorted.nix b/hosts/common/programs/assorted.nix
index b6ab5726c..6b4a80fa4 100644
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -746,7 +746,8 @@ in
     ];
     gptfdisk.sandbox.autodetectCliPaths = "existing";  #< sometimes you'll use gdisk on a device file.
 
-    grim.sandbox.method = "bwrap";
+    # N.B.: if the user doesn't specify an output path, `grim` will output to ~/Pictures (which isn't included in this sandbox)
+    grim.sandbox.method = "bunpen";
     grim.sandbox.autodetectCliPaths = "existingOrParent";
     grim.sandbox.whitelistWayland = true;