Is the sandbox a requirement by EU or is it apple imposed? If the latter, I can see the push to provide kernel-space access happening. Will alternative appsto

Is the sandbox a requirement by EU or is it apple imposed? If the latter, I can see the push to provide kernel-space access happening. Will alternative appstores also be sandboxed and run in user-space?