Update,
Can confirm that the workaround does the trick. Use:
sudo sysctl kernel.unprivileged_userns_clone=1
echo kernel.unprivileged_userns_clone = 1 | sudo tee /etc/sysctl.d/00-local-userns.conf
To set user sandboxes. This should allow you to launch the app via shortcut.