It is way past time to rethink our end-user computing devices to assume zero trust (the way browsers have to), without passing the ball back to the user in form

It is way past time to rethink our end-user computing devices to assume zero trust (the way browsers have to), without passing the ball back to the user in form of "access grant prompts" which everyone under the sun reads as "click ok if you want to be able to run this app" anyways.