This is why Cuckoo Sandbox uses sflock (https://github.com/jbremer/sflock) :)

It sandboxes extraction.