I disagree, not only is it not obvious - it's fairly obvious that he didn't mean that. > the number of Mac users running 100% signed code is well over 50% Wou

I disagree, not only is it not obvious - it's fairly obvious that he didn't mean that. > the number of Mac users running 100% signed code is well over 50% Would you say he meant "number of users running exclusively sandboxed code"? Or do you claim he means "number of users running 100% signed code outside the sandbox"? The only claim that would even make sense is "more than 50% of Mac users run exclusively sandboxed code". And it can't mean "app sandbox", but any kind of sandbox? Like, do java programs qualify? Is the JVM malware? If you install a signed app that requires the JRE, do you also install something that could run unsigned code?