What kind of sandboxing you expect? keen to learn more about it since we care about security too. (one reason why we use Tauri over Electron)

Just the default macOS sandboxing entitlement[1], which is mandatory for all apps on the Mac App Store, and optional for notarized apps.

[1]: https://developer.apple.com/documentation/xcode/configuring-...