This is true of Linux, non-app-store Windows apps, and non-ap-store OSX apps. But with the App Store walled garden craze came a much better idea: let's end thi

This is true of Linux, non-app-store Windows apps, and non-ap-store OSX apps. But with the App Store walled garden craze came a much better idea: let's end this "all programs having full run of the filesystem" nonsense and sandbox them, such that it is very hard for a user to compromise his entire machine by installing one bad program. iOS has always been this way, App Store OSX apps are increasingly this way (already has filesystem sandboxing), I believe Windows App Store is pushing this direction, Android has this to an extent, etc.