Software that can't access my resources is usually not going to be very useful. If it does get access, I have to trust it with my data, so it needs to be trustw

Software that can't access my resources is usually not going to be very useful. If it does get access, I have to trust it with my data, so it needs to be trustworthy. Sandboxing doesn't solve the problem.