It's only a sandbox in as far as Google lets it be a sandbox. I'm sure Google has telemetry in chrome that deeply tracks users beyond what is publicly known or available.