ActiveX never had a sandbox. They didn't even try to safely run untrusted binaries. "Safe for scripting" merely meant the author claimed the control was design

ActiveX never had a sandbox. They didn't even try to safely run untrusted binaries. "Safe for scripting" merely meant the author claimed the control was designed not to do horrible things to your system even if invoked by a malicious script on a web page.