> 2. I don't want my phone to run arbitrary code, that's what my Mac is for.

Then don't run it. Personally, I want all my devices that run third-party software to have strong sandboxing and defense-in-depth security. Even apps from developers I trust and admire can be compromised due to vulnerabilities and other types of attack.