Unless there is a reason not to. Giving the user the contents of their own sandbox is fine if you're supposed to let them run anything in it to complete the requested tasks.
If the only purpose of the sandbox were to isolate the instance of the service the user used then it might be a different expectation.
