Don't we have that? With SELinux, sandboxing is literally a command away (and the command is, aptly, named `sandbox´).

There are certain inconveniences when it comes to sandboxing applications, especially applications that require an X server, which is why sandboxing is not done by default on any popular Linux OS.