What logic led to rules that block sandboxes but allow AI tools like that?

vt-x is often disabled because there's malware that has exploited it in the past.