Also real security issues should be tackled on the os level. If the app sandboxing is actually robust then I don't see what is the problem.