> I think you need to move to a completely different model—like iOS for example—to meaningfully improve security controls without nerfing the OS.

How is moving to iOS's model not nerfing the OS?