alt Hacker NewsCapabilities are a way to control that, and the point being that only responsible proven applications get the certificate, hence how it all goes on iOS.
Capabilities are a way to control that, and the point being that only responsible proven applications get the certificate, hence how it all goes on iOS.
You're making the assumption that "responsible" is something provable, but that is not the case, it is specially not easy to prove software is secure from tampering its behaviour.