Isn't this similar? Rootless is strengthening the sandbox against malware.

Anyone on the new Mac version want to test this?

I don't think so, especially since the Keychain being affected by this is a user file. Rootless protects system files.

It seemed to me like rootless was at a lower level than the sandbox, since arbitrary apps don't run in the sandbox.