> Uh, Android does have sandboxing and isolation, and apps can only access your data if you specifically allow them to.
Wrong; The filesystem is FAT32, and has no additional permissions beyond a "read only" bit. Any data that's there can be accessed by apps, as things stand.
Relevant text: "Every Android-compatible device supports a shared "external storage" that you can use to save files. This can be a removable storage media (such as an SD card) or an internal (non-removable) storage. Files saved to the external storage are world-readable and can be modified by the user when they enable USB mass storage to transfer files on a computer."
I forgot to specify that in my original post. My mistake.
