I'd love to see some deeper automated analysis.

For example the XPC endpoints the binary offers and a list of other binaries which reference those.

Maybe the launch modalities, system vs. User session, which paths it reads/writes.

Not sure if all of those things can be staically determined by some tooling, but it would be really helpful.