That “completely isolated” sandbox is connected to the internet on one end, and to an insecure human on the other.