Appreciate the context. But my larger point is that all of the sandboxing and plugin permission security features falls flat until you can easily evaluate the plugins themselves from social signals and even looking at the code on Github. It's one of the main aspects the people overlook when trying to replace WordPress is the developer network, reviews, ratings, etc.
Otherwise you just have to trust the random plugin publisher and the permissions/sandboxing doesn't really matter.
Otherwise you just have to trust the random plugin publisher and the permissions/sandboxing doesn't really matter.