I believe the reason people in the hub use a VPN while testing is to isolate their internet connection from the local network. In that way no other systems on the local network would be affected. As for the sandboxie specifics I have no idea, but am curious to see the answer.