Comment by ams6110

It's not iOS that has the sandbox it's the iPhone hardware.

The encryption key management is performed in a hardware sandbox. iOS and apps running on the phone cannot access it.

I think that's the gist of it anyway. I'm too frugal for an iPhone so I haven't read up on it in detail.