Why operating systems don't provide a sandbox for running unsigned apps by default? Is your app signed and secured? it runs in the current environment. Otherwi

Why operating systems don't provide a sandbox for running unsigned apps by default? Is your app signed and secured? it runs in the current environment. Otherwise it runs in a copy of the current environment, with restrictions as to what it can send/receive from the world.