Sandbox isolation does not equal absolute security, and write permissions should still be granted cautiously after mounting shared directories.