I suppose the difference is that JSC can only execute javascript (an interface which is relatively self-contained and which Apple can control) and not arbitrary machine instructions?

Apple makes sure that JavaScriptCore can safely run untrusted code, but they don't apply that same level of security to their native API.