[macintux]

That's pretty close to what they have today. Apple started enforcing sandbox restrictions in apps distributed via the Mac App Store, and opening an app downloaded directly from the web takes more effort than it used to.