I wonder how much of this business logic would still work if sandboxed (i.e. the code couldn't access anything outside the currently open file). Certainly not

I wonder how much of this business logic would still work if sandboxed (i.e. the code couldn't access anything outside the currently open file). Certainly not everything, but it would make it easier to e.g. allow sandboxed code by default and then require signing/approvals for anything else.