If we care about giving applications restricted access to the display and input devices, then we need to prevent those applications from fooling the user. Othe

If we care about giving applications restricted access to the display and input devices, then we need to prevent those applications from fooling the user. Otherwise, a rogue application can basically do phishing, clickjacking, etc. If we don't care about restricting access, then it doesn't make sense to call these bugs security vulnerabilities at all.