I think it does prevent sending keyboard strokes by having two levels of sandboxing, where you can either run heavily locked down with no network, or opt in to

I think it does prevent sending keyboard strokes by having two levels of sandboxing, where you can either run heavily locked down with no network, or opt in to extra permissions including networking in which case your app will be extra carefully reviewed by apple + users will get huge warnings during install.