The iPhone OS also runs a sandbox, but it's much less restrictive than it should be. Often public API's will just use a private API or write to an SQLite database directly; this behind-the-curtain behaviour could be replaced by background daemons wired up to the public API's.

Just because an application is native doesn't mean the kernel doesn't protect the OS from rogue processes; desktop/server OS's have been doing this for ages.