Configurability is generally a bad idea for a sandbox. Here the configuration seems to allow whitelisting a few extra modules that do not allow working around t

Configurability is generally a bad idea for a sandbox. Here the configuration seems to allow whitelisting a few extra modules that do not allow working around the sandbox, but increase the attack surface for bugs in the implementation (because they are implemented with syscalls, ad-hoc native code, or interpreter assistance for example).