“Mac App Store to thank for requiring paid updates to have a different bundle identifier and thus a different sandbox container”