Sandboxing is a good start, but it's really just a temporary patch on a fundamentally broken model. The real issue is the data harvesting that happens at the OS level, which no amount of sandboxing can fully mitigate.