Yeah, it is a regression IMO.

You need to run it with —standalone to properly sandbox it.

Those tools should be designed to be sandboxed.