> Now imagine a situation where you're building a sandbox and the sandboxed application is using every trick possible to try to get out.

This hellish hypothetical you pose already exists. It’s called macOS.