Yes, it's a sandbox, but the players must decide what they would like to do in advance of the session. Normally, as part of booking the DM's time for the session, the players would also state what they wanted to do in that session. This way the DM can prepare in advance, without needing to prepare the whole world, or improvise large peices of content.