The rise of "apps" on the smartphone is a validation of this idea. Why is there a Facebook app, when it can provide no information without an internet connection - for example.

The real message seems to be that we still have very poor default security models for desktop OS's.