> The DMA introduces zero risk You need to think about this more carefully: there absolutely is an increase in risk by allowing other parties to run native cod

> The DMA introduces zero risk You need to think about this more carefully: there absolutely is an increase in risk by allowing other parties to run native code on your devices. This guarantees that people will be socially engineered into installing malware, intrusive vendors like Facebook will try to force users to add their stores to bypass privacy restrictions, and employers/schools/etc. will try to force their users to use their spyware for similar reasons. Now, a not unreasonable position is that this is acceptable but that should be an honest discussion starting with accepting the risk so you can gauge whether it’s a reasonable trade off or whether there are other mitigations. For example, notarization is a useful way for making it harder to install code on someone’s device which the OS vendor cannot see if it’s later associated with malware or which cannot be traced back to a source developer. The next time someone is breached, it’s useful to be able to tell whether the Firefox.app they have installed is an official Mozilla build or pretending to be one.