This is why applications should use app sandboxing on OS X. And Apple should provide an option to reject (by default) any application that is not signed + sandb

This is why applications should use app sandboxing on OS X. And Apple should provide an option to reject (by default) any application that is not signed + sandboxed, rather than: anything, signed, or app store.