So I'm really disappointed. It appears that the post has been updated to note that this patch set will never make it into CM, and the people commenting on the code review request are openly negative about it, citing concerns about pissing off Google/app developers/carriers, and making it more likely that manufacturers will make it harder to root/unlock devices.

Of course there's absolutely no evidence that any of these things are true, though I'll grant that they're valid concerns, to some extent.

It still pushes the notion that, despite being an open-source platform, Android isn't really "ours". It belongs to Google and the wireless carriers, and our ability to run our own version of a supposedly-open mobile OS is entirely at their whim.

I absolutely love CM and have been running it on my N1 for close to a year now, but it just sounds like they're too afraid of backlash to add features that could (with some refinement) really protect users.