Running a program in a sandbox can prevent it from doing any damage to the system.