This doesn't help as much as you think. Just as with the users, where if they want to see dancing rabbits they will accept everything and enter every password u

This doesn't help as much as you think. Just as with the users, where if they want to see dancing rabbits they will accept everything and enter every password until they see dancing rabbits, in software the devs will try everything, including passing the wallet to an untrusted package, to make the damn thing work.