Why is there this assumption that third party apps are going to be so unsafe?

We already run untrusted executable code in the form of JavaScript.

Why does the android system need to be different? Why can’t we say the OS needs sandboxing, api permissions, etc.

I really don’t want the only thing protecting my phone being the fact that a human sometimes reviews an app.