Several years of observing Apple's security team and what the largest third party sandbox clients (…browsers) are doing.