3 ms·

I trust Apple to build sandboxes correctly. If the vendor’s sandbox is hermetic, then it shouldn’t matter what the corpware does within it.