”Whatever the ultimate solution, we need to have one. We can’t keep treating the client as sacrosanct when attackers are well aware they are the most vulnerable component in the transactional chain.”
I guess she has a point there.
On iOS and OS X, the App Store to some extent already provide additional client protection.