Ahah
But are the compiler+OS that runs the ffmpeg executable really a sandbox ?
But are the compiler+OS that runs the ffmpeg executable really a sandbox ?
The most secure way presently is to use qubes-os that allows to use a very hardened VM to run individual applications.