Comment by simonw

It looks like they have a sandbox around file access - which is great! - but the problem remains that if you grant access to a file and then get hit by malicious instructions from somewhere those instructions may still be able to steal that file.