This is very true. I wouldn't want it to be like IOS or Android where the user itself is sandboxed and has to jump through hoops to do anything but it would be nice to be able to sandbox apps if the user wants.