I agree that third party applications shouldn't be given carte blanche by default. Third parties are best assumed to not be well-behaved, because it's been prov

I agree that third party applications shouldn't be given carte blanche by default. Third parties are best assumed to not be well-behaved, because it's been proven many times over that devs can't be trusted to keep their hands out of the cookie jar and to follow best practices (which I say as a dev myself). The extent of moddability and control afforded by Mac OS 9 extensions with their ability to patch the OS itself in memory as they pleased was incredible, but it was ridiculously insecure and unstable which makes that model untenable today. Applications having full access to everything is no different.