From their documentation:

> It does not provide security guarantees in the presence of malicious code. Malicious code can bypass the permission model and execute arbitrary code without the restrictions imposed by the permission model.

The permission model is more of a "help developers not accidentally "rm -rf /" their local machine than it is something that helps end users.