With everybody on Webkit, a vulnerability in it applies to every browser and nearly all apps on iOS. If other engines were allowed, a threat would only apply to apps using that engine.
On the flip side, keeping the engine centralized means that a single fix will close a hole in every app, keeping unmaintained apps safer.
I saw a wrapped item that did the opposite, which was weird. It was a pack of 3 pieces and a serving was 4.