You're thinking to complicated. You can configure the coredump helper in a way that the kernel presents it with the coredump on stdin. So you drop privileges and self-sandbox at startup and only then start reading the coredump from stdin.
IIUC Ubuntu and systemd however choose to dump the process manually for some reason and for that you need to have same permission as the target process.