[999900000999]

That's fine.

Most people are stupid.

In the modern era getting access to your personal phone let's an attacker have access to your identity, finances, etc.

A better approach would be real sandboxing, but let's not get our hopes up.