Bug or exploit (whatever one would consider it), it is something that should be fixed soon but probably won't. As for what I use the sandbox for, it's not for security related purposes. That is what I meant when I said "I wouldn't trust system security to a sandbox".
For Shadow Defender, it to is not used for direct security, it is instead run during my VM tests as a fail safe measure. Nothing is bullet proof (I understand this... since long ago and have said this a multitude of times on MT) and this is why many use layered security (typically a threat is block by at least one of these layers but anything can happen). I also understand that network threats are still a problem even with a Shadow Defender/VM combo even with NAT.
Anyone is more than welcome to post on my security config, profile post, or PM for thing kind of thing. Simply came by to report any problems/complications with CCAV... No need to go off topic.