It not “can be”, it is baked into ios, almost everything runs in a proper sandbox, including apple’s own apps. (iMessage doesn’t have complete isolation though, due to it being special regarding SMS - that’s why many attacks target it specifically).