The black hat can find 0-day escalation in your sandbox, too.

A user account is a sandbox.

Not as air tight as a container

Edit: it’s about the attack surface