Wouldn't running it in eg Sandboxie address the biggest risk? I mean, sure, probably Sandboxie can be escaped, but what malicious script that's busy adding my c

Wouldn't running it in eg Sandboxie address the biggest risk? I mean, sure, probably Sandboxie can be escaped, but what malicious script that's busy adding my computer to it's botnet is going to assume that my Firefox running in a sandbox?