While not wrong, certainly not the fault of Apple. This is a docker shortcoming.
That is something I do actually like there. And Apple isn't even forcing developers to do it (unless they want to publish in the app store which most apps I use don't do), just more and more app developers sandbox themselves.