Frankly, yeah. Like yes, zero day vulnerabilities exist, and things can sometimes escape the sandbox. But I don't think a sandboxed OS will be free from them either.