As I understand it, this "Application Sandbox" is to prevent app A seeing what app B is doing.

The problem here is a different one: The user granting an app access to their files and then having no way to prevent that app from sending that data to the developer of the app.