Even the author says Flatpak is a sandbox.

The most simple but also least effective sandbox type is the container or wrapper sandbox that builds an isolated process environment and then executes the target application inside.

Flatpak provides an isolated runtime environment using a container type sandbox to execute the target application inside.

… there are two issues that prevent flatpak from providing a real sandbox environment…

Just that it’s no true scotsman, I mean sandbox.