Interesting take, I agree it should be that way (i.e. sandboxed up the wazoo). Apple might even have done the sensible thing, but we’d have to trust them, which we can’t, because closed source and megacorp that can’t be trusted if they see dollar signs. Also, if they had, why complain about giving 3rd parties equivalent access, except maybe to spank the EU for having the temerity to hold them to higher standards. On balance, I expect critical vulnerabilities incoming.