> The kernel will enforce those sandbox rules, and ensure that the app never accesses more than all of your data. WTF good is a sandbox if this is the level of

> The kernel will enforce those sandbox rules, and ensure that the app never accesses more than all of your data. WTF good is a sandbox if this is the level of sandboxing it does? The app store is not great at catching things before they get released to the public, so this seems like a good reason to not trust apple exclusively if they're the only line of defense. Why can't the calls to internal APIs still require auth'ing? Sandbox running software from accessing data outside of a specific internal API (via socket, etc), and require a handshake process or something before it returns data via that channel. The user can still get an OS-level prompt to approve use of API. You can literally still require a signed key in this step to identify apps. If an app tries to go around that... sandbox keeps it from seeing the rest of the system.