Thank you for the feedback! My general feeling is that people are not doing sandboxing. Those that are, generally use devcontainers or some docker based solution