That's actually an interesting way of looking at the problem of untrusted code. We might still need a way to signal to people what pop-ups really mean so we avo

That's actually an interesting way of looking at the problem of untrusted code. We might still need a way to signal to people what pop-ups really mean so we avoid the blindly yes-yes-continue clicking, but in general if things are as sandboxed as they are on mobile (sans the sensor and network access that still allows you to do a million invasive things, so perhaps more like websites where the software is closed when you close it) then we might not need this sort of scheme.