There isn't that much to write, Matchbox has enough to make X11 touchscreen friendly. Really it's just about all the hardware stuff which they've done before I'm sure.
Not running apps you don't trust is an overly simplistic security model, and completely ignores exploits.