You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.260,
ImprovementsSection of the release
On macOS, the sandbox's list of always-protected paths now also includes ~/Library/Keychains, alongside the existing SSH, GPG, and AWS backup directories.