Just to add, pledge can be called repeatedly throughout the program to reduce the behaviors that are permitted unlike seccomp.
If a program in a seccomp sandbox couldn't add a new secxokp filter to itself, you wouldn't be able to run programs like OpenSSH inside containers (which you can).