> Yes, outside of a sandbox it's expected. But you don't sell something as secure and sandboxed when it's not. It is isn't being sold as "secure". It's sandbox

> Yes, outside of a sandbox it's expected. But you don't sell something as secure and sandboxed when it's not. It is isn't being sold as "secure". It's sandboxed in the same way that Python virtual environment is sandboxed, i.e. you're not messing with the system software installation. Real security sandboxing is a completely orthogonal feature that package managers do not deliver either.