Is it because the sandbox is bad and does not perfectly simulate the computing environment of a real device?

Because to me it sounds like a cat and mouse game that Google and banking apps are destined to lose.