Or to flip that around, they could keep the walled garden but allow the user to spin up a virtualized environment completely walled off from the main OS, and ru

Or to flip that around, they could keep the walled garden but allow the user to spin up a virtualized environment completely walled off from the main OS, and run compilers and other software without risk to the phone side. Then the author could install a Jornada emulator or a full Linux distro.