One idea I don't see discussed is that the App Store model is a disincentive for Apple to come up with better sandboxing and security. Apple is in fact uniquely positioned to introduce a better sandboxing model. They control most of the stack, crucially the CPU and the build toolchain, not to mention the PL. They could, were they not so reliant on the App Store auditing process, make it less likely for people to deve…
Any chance you can dispel with the meaningless buzzwords ? "Abstractions around processes and IPC" does not reduce the number of malware and privacy invasive apps. And who knows what "virtualization and capabilities" even means in the context of iOS. It has been limiting and securing access to APIs/data that has been responsible for improving the privacy and security of iOS. For example warning about use of clipboard…
I'm happy to explain more if you frame your question (for which you seem to already have an answer) less combatively.