Systems that have implemented stricter sandboxing are in general far less trustworthy and I think the security discussion went out of scope here.