IMO, it's not even a sandbox, that's just a marketing lie.

This was internal restrictions in the code, that was bypassed. A sandbox needs to be something external to the code you are running, that you can't change from the inside.