Mac apps outside the app store can still be sandboxed, but they have to be signed.