The iOS model is certainly a good default, but that does not mean that some limitations that come with it couldn't be lifted to some extend. Even with full sand

The iOS model is certainly a good default, but that does not mean that some limitations that come with it couldn't be lifted to some extend. Even with full sandboxing, applications could do a lot more without compromising security than Apple allows.