> So the end goal is for a system where users download random binaries off the net They download the binaries they trust off the net. You're insinuating that

> So the end goal is for a system where users download random binaries off the net They download the binaries they trust off the net. You're insinuating that some users are too stupid to know who to trust and go around downloading random binaries. If there are such users, then I guess my OS is not geared towards them, but rather to software developers, creative professionals, etc. who know what they're doing and need to get their application software directly from the developer. People who don't know who to trust or want their OS developers to keep repositories for them can keep using Apple devices with their walled gardens or repository-centric Linux distros. > which never get any security patches and leave dozens of copies of vulnerable dependencies lying around? Do Windows applications never get any security patches? And yes, sandboxing is not an infallible security mechanism, but it could help, and it also has other practical advantages not related to security.