The second option, that all apps have a higher level of sandboxing. Until iOS 8 apps couldn't do anything to modify the OS besides adding push notifications and

The second option, that all apps have a higher level of sandboxing. Until iOS 8 apps couldn't do anything to modify the OS besides adding push notifications and maybe a page in the settings.