[jsjohnst]

> Apple controls the JS sandbox in Safari, whereas they don’t control the ScummVM scripting sandbox.

AppStore apps themselves are sandboxed too. You can’t execute all arbitrary code just because it’s an app.