net-im/riot-web cannot install when using network-sandbox

I've enabled some sanity and safety options for Portage, most notably sandboxing. However, this ebuild relies on Yarn introducing (insecure, untrusted) packages into the system from other Internet sources. The network-sandbox feature of Portage does not allow this, and installation of riot-web will fail.