With a proper sandbox, a password manager won't have internet access.

It also wouldn't have a competitive feature set if that were the case -- syncing across devices is a bog standard feature for password managers.

Also, the possibilities for nefarious apps that aren't thwarted by sandboxes are endless: social engineering and phishing are very common and effective.