Why can apps installed from anywhere steal your data?

Surely Apple's OS/framework that they tried to say they spent so much money developing, sandboxes and protects all running code from said data vacuuming behaviour?

Or did you really believe Apple when they said it would reduce security™

Because the only reason it would is if Apple let it happen on purpose so they can create a consumer backlash by saying "I told you so".