why DAC isn’t sufficient for Android that it needs MAC(selinux)


I learned that each app is assigned a separate UID so that a rogue app cannot access other apps data and system sensetive data and files.

What’s problem with this that they have to use MAC(selinux)