This is not about admin rights, it’s about the agent leaking information it knows from its memories. Sandboxing won’t really help you.

Sandboxing does including limiting network connections until you approve them, this kind of traffic would have been easy to detect