The image library also runs sandboxed, and they found a way to "escape it with ease." Sandboxes don't reduce the need in having programmers with straight hands

The image library also runs sandboxed, and they found a way to "escape it with ease." Sandboxes don't reduce the need in having programmers with straight hands. They just trade less safe APIs, for ones deemed more so. You will have as much holes in the sandbox, as much APIs you add to it.