Given the complaints that swipe-to-close on any Android app kills every Android app running, I'd guess that they all run in the same sandbox - that is, the environment simulates a standalone Android device and runs all the running applications in it the same way it would run in a real Dalvik VM not as separate instances...