Why would a NSA guy use Russian security software?
To get things done you can not do at the office or you just lack the office time to get it done.
There was a person on the docker team, who had dockerized every other applications like chrome, firefox, ALSA sound server, and more. But even she found it hard to sandbox everything.
I'm using docker as a leading sandboxing tech. Do you mean something else when you mean sandbox?