I’m looking to get an official answer on this.
In the meantime, have you considered this workaround that was previously shared: New sandboxing of Connect App Iframes in Confluence and Jira - #68 by sven.schatter Curious whether that would work in your case.