Also the "UNIX ideal" is composable tools, which doesn't combine very well with any kind of sandboxing.