OPs question was more around sandboxes though. To which, I would say that it's to limit unintended actions on host machine.