There are different levels of sandboxing including kernel level for highest protection. definitely depends on the usecases. industry is moving towards on-demand cloud sandboxes.