Because it is robust and lightweight. It tackled all the facets of apps isolation.
It's a fantastic packaging and deployment format, but it's not a universal solution.
Everything I read is along the lines of "this is not secure, we think, but do not have any specific examples. But be careful"