An ugly feature of sandboxing is that the protection rules are mostly static. This can lead to much more authority handed out than would really be necessary and may cost the user additional dialogs.