So let each build script define its own level of sandboxing and then users can determine whether they are okay with that level or not, e.g. `cargo build --sandbox-level=...`

That’s not solving the problem, that’s avoiding it by making it the users fault if they make a mistake.