Since installing entirely new software is just downloading Cursor.AppImage from the official website and double-clicking on it, it's not a large hassle for most users.
If you're on Arch, there's even an AUR package, so it's even less steps than that.
AppImages aren't sandboxed and they can access the rest of the system just fine. After all, they're just a regular SquashFS directory that get mounted into a /tmp mount and then executed from there.
