Folders protected by the sandbox, can I add to this list?

Yes by adding to the list of protected files & folders in Computer Security Policy ~ My protected files.

Say for example that you wanted to protect your desktop from the possibility of malware dropping internet links you could add:

%Userprofile%\desktop*.url and