They do allow, but it’s not required. So many developers take the easy way and don’t sandbox their app even when it’s easy. The macOS sandbox clearly needs some

They do allow, but it’s not required. So many developers take the easy way and don’t sandbox their app even when it’s easy. The macOS sandbox clearly needs some improvements, but developers have their part of faults too.