Update: the latest version of Grist Electron has sandboxing enabled by default. It is a new form of sandboxing, since the existing mechanisms we had either didn’t work on Windows or were long deprecated. It has been working ok for me so far - if anyone sees problems please do let me know. I updated the README with information on how to disable it, just in case.