Yes, by containing the payload and decompressing it.<p>The difference is that by not sandboxing it, that malicious file could also cause its payload to be executed in the permission scope of the decompressor.