This seems like an obvious behaviour for data privacy/security, but does the ios framework ensure that the UserDefault databases that the client app and its sdks access are restricted to only the modules that created them. So for example, if the client calls UserDefaults.standard, it returns a pointer to a different database than if, say, a client's sdk is calling it.
Note: I tried looking at Apple's UserDefaults documentation but it does not make this information available.