That was a gut reaction, mostly countering stupid signature based "verification" of binaries, a la typical anti-virus software. In terms of locking down an And

That was a gut reaction, mostly countering stupid signature based "verification" of binaries, a la typical anti-virus software. In terms of locking down an Android box, well, the least they could is what you suggest, fine-grained control. Flash apps have this, there is a bit in the file that allows the applet to choose between file-system access and network access. I thought that was clever. Another thing is to allow applications to send back only data that they bring in (i.e. for version verification.) along with a generic set of data about device capabilities, location, etc.