Short answer

Sandboxing limits what generated code can read, change, contact, and consume. It narrows impact but does not create trust.

Boundary

Use disposable storage, scoped identity, resource limits, and no secrets or broad host mounts.