Indeed, it's using `sandbox-exec`. I'll add this to the docs.