I think most current examples of sandboxing also implies app signing and whatever restricts users' own control, hence the confusion. Users are sometimes allowed to lift the restriction but it's mostly an all-or-nothing bet.