Some commands can be excluded from the sandbox, meaning they run outside its restrictions. For a command that cannot be parsed, a fallback check decides whether it matches one of those exclusions. That check is now a simpler word-by-word match. In this build its settings always come back empty, so the check never runs.
Why
In practice nothing changes for now in which commands run inside or outside the sandbox.
