Comment by raw_anon_1111

> Apps can and do ship with sandboxing rules that will be applied at runtime.

Hardly any apps outside of the Mac App Store voluntarily opt in for sandboxing

> I listed ChromeOS as one of four consumer operating systems used by billions of people that uses sandboxing, not as an open source OS.

And also locked down…

> AOSP is very much open source

Calling AOSP open source when it’s almost useless to most consumers without the proprietary bits from Google is just as disingenuous as calling iOS open source because Darwin is open source.