For a virtual environment to qualify as 'a sandbox', your users must be able to create turing machines, out of stuff the found lying around. - Locks Law (which I just made up :).
I think Second Life is cheating though, because you can attach scripting code to objects.