so why are people saying the sandbox was awful if it required a 0-day to escape it?