No one said isolation solves all security vulnerabilities.

I'm not sure what else you'd expect from one of the most widely used software platforms ever made.