this is a much better post to explain why sandboxes for coding agents

https://www.docker.com/products/docker-sandboxes/