Everyone's bolting sandboxes onto their agents and calling it security. Containment isn't least privilege... the blast radius is smaller, but an agent with too much access inside the box still burns you. Lock down the permissions first, then the sandbox.