What kind of protection does an electron sandbox provide?


How does an electron sandbox work? What kind of protections does it provide? Signal for example now runs by default with --no-sandbox. Should I be taking extra precautions when running signal?