This is partially true: Android does sandboxing, but it only gives you partial control over your apps. Firstly, certain permissions give a wider access than initially seems (e.g. media access). Secondly, not all permissions are user-manageable. For example: you cannot stop certain apps (like banking apps) to query the system for other apps you have installed.