bb vs hips

what’s more secure bb or hips set to don’t show alerts and auto block

also is the auto sandbox ever used if cis is set this way

and can malware still drop files if cis is set this way