Show when an app is tightly sandboxed

### Problem

There's some grey area between apps that are explicitly doing things that are icky and apps that are very tightly sandboxed, but apps that have the tightest sandboxes are treated the same as apps that have acceptable sandbox holes.

### Proposal

Just like we give apps with dubious sandbox holes badges of shame, we should give apps that are very tightly sandboxed a badge of honor

### Prior Art (Optional)

_No response_