I think there should be a separate UI for installing or running a downloaded program (with a huge red warning) so the users cannot accidentally run anything.