Possibly requiring state-actor level of expertise, but I'd be paranoid about escaping the container / vm and gaining elevated privileges ;) Sandbox will in all

Possibly requiring state-actor level of expertise, but I'd be paranoid about escaping the container / vm and gaining elevated privileges ;) Sandbox will in all probability be running alongside application code so the risk is an attacker gaining complete covert control!