I would say the sandbox limits on the MAS are worse, because they go against what a computer is supposed to do. Limits on the phone are considered ok, because first and foremost, the phone has to operate as a phone.