Don’t you just want a clone in that case?
By itself, that doesn’t help if the thing in the sandbox does useful work for two hours and then does rm -rf /
By itself, that doesn’t help if the thing in the sandbox does useful work for two hours and then does rm -rf /