Sandboxes are almost never perfect. There are always ways to smuggle data in or out, which is kind of logical: if they were perfect then there would be no result.

> if they were perfect then there would be no result.

You shutdown the sandbox and access the data from the outside.