1. Sandboxing might help prevent certain types of attacks but the App Store review process goes above and beyond simple API restrictions and imposes rules on ho

1. Sandboxing might help prevent certain types of attacks but the App Store review process goes above and beyond simple API restrictions and imposes rules on how you're allowed to use those APIs to prevent abuse of privacy. For example: just because I grant an app access to my contacts/photos for a legitimate purpose doesn't mean I want that company to exfiltrate that data and sell it to a third party. Sandboxing won't help you there. 2. Sandboxing is no panacea as we've seen from multiple Android malware attacks that abuse system vulnerabilities to break out of the sandbox. You're also underestimating the amount of damage that can be done even within the sandbox: - The CryCryptor ransomware abuses file access APIs to encrypt photos and videos on external storage and hold them hostage. (https://threatpost.com/emerging-ransomware-photos-videos-android/156893/ https://threatpost.com/emerging-ransomware-photos-videos-and...) - The DEFENSOR ID banking trojan abuses accessibility APIs to steal login credentials, text messages, and 2FA codes. (https://www.welivesecurity.com/2020/05/22/insidious-android-malware-gives-up-all-malicious-features-but-one-gain-stealth/0/ https://www.welivesecurity.com/2020/05/22/insidious-android-...)