I think the crux of the issue is that making a system that's customizable AND sandboxing AND user friendly multiplies together to create development and testing effort that's not palatable for most right now.

Even the open source offerings that add sandboxing often drop either the customizability or the user friendliness.