The sandbox matters because it is designed to keep browser code contained rather than giving it unrestricted access to your computer. But an attacker getting a foothold simply because you visited a ...