Googlebooks, which start shipping this month, will run a fork of Android 17, which sandboxes every app.

Also, some people use an iPad Pro connected to a USB hub connected to a monitor, keyboard, etc, as their daily driver.

Also, doesn't MacOS sandbox most apps?