The current model fails to protect people anyway while providing an extremely strong incentive for the community to publish software that undermines the “security” of the device.