toolbx is not actually intended to provide any security or isolation, see e.g. https://github.com/containers/toolbox/issues/183
If you want to use toolbx for more isolation you'll have to end up turn off a bunch of features and configuring it in weird ways that ultimately defeats the purpose of having toolbx in the first place....
It is a lot easier to just to cut out the middle man and use podman directly.