Not that sandboxed apps can't yoink your shit if they really wanted to, but it's a nice barrier to have.
> Step 4: Allow keychain access.
Uhmmm.. what?