>Sandboxes limit what the agent can access on the host machine as well as the network and public internet.

this is exactly what I meant. I am presuming the danger is AI reacting to personal notes that it reads on your computer, like a diary, and you should not allow the tools to have access to those documents.