If you give it auth information to talk to Google apis, that’s not really sandboxed.