Incapable of running malware… what might that mean? Perhaps each app running in an enclave, only permitted to access one IP address and one directory in the loc

Incapable of running malware… what might that mean? Perhaps each app running in an enclave, only permitted to access one IP address and one directory in the local file system? I can't imagine anything less strict having any hope.