Not the person you were responding to, but: implements security with fine-grained and system-enforced permissions, not human approval for apps.

One of these methods has a much better track record than the other.