Apple definitely needs to keep working on the sandbox both for defense in depth and so that sideloaded apps (if the court forces it) can be secure enough.