Something like this code notary should be integrated in the OS. When you install an app, the OS records a list of all it's components (declared in a manifest),

Something like this code notary should be integrated in the OS. When you install an app, the OS records a list of all it's components (declared in a manifest), and when a vulnerability is discovered the OS could quickly disable the affected apps (or apply a quick remediation).