Seems like the current implementation can not take care of a lot of common scenario. It is not as ready. It is hard to be safe in an open world. I guess that's the reason why Apple postpone the requirement for sandboxing to March next year.