Sandboxed typically restricts a program from being able to read/write to various areas (think an app isn’t allowed to use the network, or access USB devices, or it’s only allowed access to a certain directory in the filesystem).

Containerised is a way of virtualising an app/apps so that they can be easily distributed to run once or thousands. They can and are also sandboxed to different degrees.

Sandboxed rather than containerised I think.

“Got a sec?”

I’ve been ‘told off’ so many times by the internet for my cat and grep combos that I still do it, then I remove the cat, it still works, and I feel better. shrug

Quite a few kernel processes begin with k as well.