“Unlike SOCKS, the application cannot accidentally leak data by failing to make some connection via the configured SOCKS, which may happen due to a mistake by the developer.”
oniux puts an app in its own Linux namespaces where the only network interface goes through Tor. torsocks relied on LD_PRELOAD, which static binaries and raw syscalls walk straight past. Tor admits oniux is new and experimental and torsocks has 15 years of testing. Linux only.