Malware installed on a device running macOS, iOS, and Android, for instance, has no ability to defeat this isolation unless the OS itself is compromised through some sort of exotic zero-day exploit. So far, these assumptions have been proven correct in real-world practice.
Mmmmm.
From my understanding it is the same on linux though, theres no sandbox preventing an app or malware from accessing anothers app data