I believe that at least app-store apps are already ran in some sort of sandbox.