The problem is you can't trust the app, therefore it must be sandboxed.