The world needs an opt-in trusted execution environment. If it is mandated from above, then people will rebel against it. At the same time, it must not put compliant programs at a disadvantage to noncompliant malware, as most sandboxing schemes do so today.