[slekker]

It's a trade off for sure, maybe if companies could have "honeypot" environments where they update everything and deploy their code, and try to monitor for sneaky things.

[teiferer]

It's easy for malicious code to detect sandboxing.

Also, check out the VW Diesel scandal.