And people think macOS sandboxing is "hyperbolic"