For one thing, sandboxing does not prevent apps from using IPC to talk to each other, so Google Play can communicate and thus share data with other apps regardless of the user's settings.