Privilege separation

iOS runs with the principle of least privileges. It contains two user roles—root and mobile. The most important processes in the system run with root user privileges. All other applications that the user has direct access to, such as the browser and third-party applications, run with mobile user privileges.