> robust application-level access control would be a helpful thing to build into modern operating systems

Something like Windows Store apps, but which ideally wouldn't require the use of a specific store? (Only Entreprise apps can bypass the store from what I know)