Windows Sandbox gets much safer once you disable the conveniences Microsoft leaves on
There's this Windows Sandbox habit that I'm not so proud of: when I run an executable, or anything else I don't completely trust, I basically sit and watch. The fact that it's open in Sandbox makes me feel like I don't have to worry about it; it's Sandbox, so whatever danger is there is contained.