npub1ly…hhj2g on Nostr: Is it technically 100% sure that no app can ever escape their sandbox or more like ...

Is it technically 100% sure that no app can ever escape their sandbox or more like 99%? In other words is the main private key always safe from malicious apps?