No. Sandboxed apps only prevent some fingerprinting, but notably provides a ‘reasonable budget’ for data that can be gathered.

Sandboxes absolutely prevent all cross-app tracking. The app doesn't have access to anything outside the sandbox.

What you said about the advertising ID is true and is basically what I said, but disabling the advertising ID does not stop profiling or fingerprinting, just limits the most obvious applications of it.

What useful tracking do you think is still happening when you take these precautions?

Using a VPN is a start, but we’re comparing the privacy of Android and iOS. You can use a VPN on both. iOS includes an opt-in pseudo-vpn baked into the OS with private relay, for $0.99 per month. And besides, using a VPN does nothing to block the the fingerprinting done by native apps.

So then what difference does it make? You can use whatever VPN you want.

Are you sure you work in security? Like, mall security?

Yes. Stick to the topic. The ad-hominem is just childish.