That's easy, and already done. Phones only touch untrusted content when they need to, it's just that they need to touch it immediately upon receipt