I haven't checked the details but I suspect its more to do with not being able to prevent rogue agents from escaping their sandboxes