I hope they will properly sandbox plugins like any modern software should.

That would've been the wasm plugin route, which was rejected in favor of this great emacs feature of using an obscure language, so sandbox are unlikely