You can have security without having a walled garden. By trusting the user with the key of their own property.
You mean like the developers holding the npm-publishing keys that just allowed a worm to spread?
You mean like the developers holding the npm-publishing keys that just allowed a worm to spread?