Comment by deprave

Sandboxing isn't a magical solution. All it does is limit resources available to an app. Usually, until a user authorizes access to such resources.

"Here's a list of thirty privileges this app needs to run. Do you approve?"

Given you just downloaded it, why wouldn't you?

After all, every other app requires a huge set of privileges to run, too.

Do you see the problem? :)