I think Claude Managed Agents strikes the right balance here, the sandbox is optional and can be spun up independently of the rest of the agent loop.

I recently ported an old project that was focused on bash tool calling to CMA and it worked well!