You could have fakeroot, for instance: https://wiki.debian.org/FakeRoot

Sandbox doesn't imply not having a file system available (for example, for use in imports), I believe this is more of a historic limitation than a strictly technical one (just because we need the sandboxing concept).

I know. Fakeroot is not strictly sandboxing, but I think it illustrates the point.