No, unless i am mistaken they are not sandboxed with respect to the SD card, and apps with write permission (comes for free with API 1.4) can also modify or delete any SD card content - to install a windows virus for example.