Correct me if I'm wrong, but the iOS sandbox also seems weaker - I've seen a few occasions in which calling undocumented functions can be all it takes to bypass protections significantly. I assume this is part of the reason Apple is so reliant on reviews.