For starters, they could overhaul the concept of "safe files". This is the vector that allows auto-downloads and installer execution.

MacDefender is relatively tame. Next time it could be a rootkit packaged in a trojan.