Comment by tptacek

The post is explicit about what they mean by sandboxing and what the tradeoffs are for the model they're discussing.