Sandboxing insufficiently addresses this problem as permissions can be granted by the user for legitimate purposes and then once granted they could be abused to violate user privacy.