I see those 2 things are orthogonal. if it was up to me all apps, even apps not from the app store would be sandboxed by default (and if you wanted to you could

I see those 2 things are orthogonal. if it was up to me all apps, even apps not from the app store would be sandboxed by default (and if you wanted to you could give the permissions to un-sandbox them). ideally though they'd run in the sandbox.