i really dont know how it works.
[attachment deleted by admin]
You can block it by disabling the sandbox. ;D
Other than that the sandbox is supposed to be able to access certain parts of your system, but it’s not allowed to make permanent changes or communicate with any other computers. Thus, yes, it could log your keystrokes, but it couldn’t give them to anyone else without you allowing a popup.
Can someone please correct me if I’m wrong.