This is enforced by the platform sandbox, not the App Store. They are entirely separate things.
Otherwise, the alternate App Store would be relegated to installing apps within its own sandbox. And people would continue to howl about it.
This is enforced by the platform sandbox, not the App Store. They are entirely separate things.