I really, really like this approach to data, and there's so many advantages beyond the ones outlined there: if you could turn that collection approach into a un

I really, really like this approach to data, and there's so many advantages beyond the ones outlined there: if you could turn that collection approach into a universal/OS-level API you could have some kind of setup where user data by default stays on the device, then to use it, the app/app server has to request it explicitly (allowing the user easy and powerful, but granular control over who gets what data) and then user data is further protected by the other measures talked about in their paper. Some level of public education is also required I think, to make people aware of the value/threat of just giving everything up every time someone asks for it.