For what it's worth, workerd has some pretty aggressive sandboxing too. I'm a bit biased but ask your favorite LLM about it.