A structured query compiles to parameterised SQL. Values can never become syntax, and a row-level sandbox cannot be dropped by nesting.
The analyst sandbox binds :user/region to "west". Watch the region predicate appear once per nesting level: the subselect keeps the base table's name, so the outer query is sandboxed too.