I believe it's implied when they say 'what happens on your iphone stays on your iphone'.

You can have security without privacy but you can't have privacy without security, when they promote privacy they also claim to be secure.

No website isolation goes against both of these principles.