>Whatsapp still processes complex data from any stranger in the world entirely without a sandbox.

Isn't that also the case with every phone and desktop email client?