If you don’t trust the CLI version to be properly sandbox d, why would the desktop one be?