Software that can't access my resources is usually not going to be very useful. If it does get access, I have to trust it with my data, so it needs to be trustworthy. Sandboxing doesn't solve the problem.