I think sandbox deployment is very secure. You can observe the effect of running a program before running on your device. However, it will be time-consuming if you run every programs in sandbox. Everything needs a trade-off.