How Claude Code and Codex approach sandboxing

TL;DR -- more configurability with Claude Code, better out-of-the-box experience with Codex.

That tracks with the rest of their philosophy too