Since they save data there is no full sandbox because at least they have direct write permission at storage content. Im not sure if parallel space isolate aps from the system tho.