A download manager doesn't need to access your .ssh directory, your browser cookies, get your motherboard serial number, query a list of nearby WiFi points and

A download manager doesn't need to access your .ssh directory, your browser cookies, get your motherboard serial number, query a list of nearby WiFi points and so on. But in Linux all of these is accessible to any program by default. > and you will open the files it wrote. Open in a sandbox? Why not.