Every task automatically gets git worktree isolation to support the parallel work. The VM sandboxing is project scoped and more about isolating agent workloads from user-space for those who want to --dangerously-skip-permissions for example.