Sandbox protects access to all
system resources

Application (not applet) developers can
write their own SecurityManager to
open up the sandbox