This app is written by someone who is not a certified cybersecurity author exactly because the app is running on a abstracted sandbox-contained layout. The defense in depth to this system is there so that anything you put on it will be secure by default. That is the answer to your question.