The sanest solution to the problem is for OSes to fix their permission models and realize that app isolation is as important as -- or more important than -- use

The sanest solution to the problem is for OSes to fix their permission models and realize that app isolation is as important as -- or more important than -- user isolation. Easier said than done, of course.