Right, but it's pretty clear from the paper that one major step forward would be for apps to check whether their keychain has been compromised.

This is something that apps can go forward with. But doesn't close the door if it was already opened.

Overall, this is just a brutal suite of bugs though, and a great paper.