That's also the case for apps though, at least on iOS apps are sandboxed almost as well as web sites to my knowledge.