The other 10% being what differentiates them in the market :)
If you're on Arch, there's even an AUR package, so it's even less steps than that.
AppImages aren't sandboxed and they can access the rest of the system just fine. After all, they're just a regular SquashFS directory that get mounted into a /tmp mount and then executed from there.