Why do powerful tools like Bash command execution need to run in a sandboxed environment?