The relevant word here is airgapping, not sandboxing.
All such measures make the bot useless. If it can't make HTTP requests or call APIs, it is useless.