Why do programmers call them sandboxes? It's like the least secure children's toy