Why do you say that?

Eg, if used with Colima in macOS, it means I can run a devcontainer in an isolated VM and Nono inside the devcontainer can restrict a lot what can and cannot be done.

You get credentials proxying and network outbound limits.

How is Docker Sandbox better sandboxed?