My hope is literally:

Throw side-loaded Apps into a separate virtual machine with a different iOS, etc. No access to anything other than itself.