>and any sandbox needs holes punched otherwise it is not useful in practice

Don't assume our individual use cases. It can be perfectly useful with access to just one folder and zero network asside from the API.