wine: ~/Passwords.kdbx shows up in the sandbox

[NetSysFire]

It is curious. net none works but black and whitelisting seems weird. I have a kdbx file in my home directory, to reproduce just touch Passwords.kdbx and run firejail wine explorer, explorer is a wine built-in file manager and you can still see the file, but it is displayed as 0 bytes and using firejail wine cmd (also built-in) to issue type Passwords.kdbx also fails.

What is up with that? I feel like it may be related to wine being multiple processes and that there may be other tiny "holes". Maybe there is one outside the sandbox somehow? I am not familiar enough with wine to debug it, but the reproduction steps are dead simple luckily.