And for those potentially dangerous Mac apps that <i>need</i> to touch your home directory or essentially become a key logger, I&#x27;d want them to be as watched by Apple as possible. Keep them in the Mac App Store, with a strict permission &#x2F; entitlements model.<p>That&#x27;s what I&#x27;ve never understood about the Sandbox policy. Those apps will still be shipped... they&#x27;re just another level removed from Apple&#x27;s oversight. And it&#x27;s not like iOS, where not allowing those apps ensures that 99.9% of users will never <i>ever</i> see those apps.<p>Gatekeeper helps with this to a degree, but why not just allow them in the Mac App Store?