It is impossible to build a sandbox that protects all user interests if there are no checks and controls.

A sandbox can not protect against things like user tracking or crypto mining and can give no guarantees about what an app is going to do with the private data you are entrusting to it.