I don’t understand the details – what is the downside of such a default ?

   “I could see myself inadvertently cabal-installing utilities (eg: newt, bnfc, etc...) in sandboxes on accident.

What is wrong with this?