Not so much security sandboxed as merely namespaced to be able to have specifically-versioned dependencies. At least from what little I have read.