diff --git a/hosts/common/programs/assorted.nix b/hosts/common/programs/assorted.nix
index 442a40b0a..3ac1b04b3 100644
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -1211,7 +1211,7 @@ in
 
     util-linux.sandbox.enable = false;  #< TODO: possible to sandbox if i specify a different profile for each of its ~50 binaries
 
-    unzip.sandbox.method = "bwrap";
+    unzip.sandbox.method = "bunpen";
     unzip.sandbox.autodetectCliPaths = "existingOrParent";
     unzip.sandbox.whitelistPwd = true;