No need to sandbox, some android objects have permission and capability control. It is just not propagated (and enforced enough) so you get all kinds of confuse

No need to sandbox, some android objects have permission and capability control. It is just not propagated (and enforced enough) so you get all kinds of confused deputy problems. If it were, you could have separate permissions for combining mail provider with network streams.