If you end up with "X can open any file" that's something that's worth noting to a consumer. The sandbox capabilities don't have to be perfect in order to expos

If you end up with "X can open any file" that's something that's worth noting to a consumer. The sandbox capabilities don't have to be perfect in order to expose a scary situation. Further, you can restrict a process to only open specific files in a number of ways on Linux, including based on path. There's room for improvement, though.