Educated guess: it may be the application processor also has a trusted execution environment containing stubs that communicate with the Secure Enclave. This would prevent kernel level exploits from writing to the shared memory and mailboxes.