Wait, slow down. As far as I can tell from a quick Google, GaragePay was only using encrypted disk images as a way to store its private app data in encrypted f

Wait, slow down. As far as I can tell from a quick Google, GaragePay was only using encrypted disk images as a way to store its private app data in encrypted form. But obviously there are many other ways to implement encrypted storage, within the app process rather than calling out to the OS. This would avoid the need for any holes in the sandbox; it would require some work to implement, but temporary sandbox exceptions were known to be temporary for years. Even if the developer wanted to be able to access disk images from older versions of the program, they'd be dealing with an undocumented file format, but AFAIK there is a lot of code out there for dealing with dmgs, so it should be possible.