>Not a single person, prior to July 2026, would consider a shared packaged manager a sandbox in this or any other dimension. The 0-day was just incidental, this wasn't a sandbox at all.

???

The package manager was specifically there so agents can install random packages without open access to the internet.