Comment by JCattheATM

It's generally only initial work to make the policies to maintain a program, maintaining doesn't even really exist unless the program radically changes in some way.

Fedora is notable because any software installed via repositories has a policy written for it, so it is already far more in effect than you might realize.

It's entirely comparable to Android sandboxing because it's part of the foundation of Android sandboxing.