| ▲ | selridge 3 hours ago | |
That’s not true. Lots of apple’s own first party apps use SBPL to sandbox because the entitlement granularity doesn’t cut it. There’s also lots of apps on the MAS which use temporary-exception SBPL to fully sandbox. I agree that there is no sense in operating dual systems, but entitlements can’t replace SBPL yet. | ||