>Without review, publishing an app with a sandbox bypass, or simply abusing entitlements, becomes trivial. A sandbox that can be trivially bypassed is simply b

>Without review, publishing an app with a sandbox bypass, or simply abusing entitlements, becomes trivial. A sandbox that can be trivially bypassed is simply broken. Granted, it's not easy to define what apps should and shouldn't be able to do within the sandbox. Permissions systems are difficult to get right. But whatever the rules are, they must be enforceable.