They are. Look up "Blastdoor" and other related efforts to sandbox decoders.

Sandboxing is not perfect. There are sandbox escapes all the time.