If basically every example of by-default application sandboxing also results in a loss of user control, are they really orthogonal?

As soon as you implement the option at an OS level, there are going to be (many!) developers who want it enforced for all users. It's the obvious path to go down.