There is also a feature called App Translocation that further restricts the abilities of applications launched from disk images.