> Without further sandboxing, it would execute as the user with access to everything for that user - which in practice means mostly everything.

Which is fine and the reason behind qubes OS decision to have passwordless sudo enabled on qubes.