Sandbox or not, even with existing regression tests not all the bugs will show themselves. It is enough not to have few scenarios covered and that's were unreliable AI code might have spread. Thus, risk is there when vibe coding without explicit boundaries and knowledge.