yes, it is having NE provider, and yes the helperprocess(xpc service) is sandboxed.

Filed a feedback: FB15270972