That sandbox gives default read only access to your entire drive. It's kinda useless IMO.

I replaced it with a landlock wrapper