@glyph I mean, I'm sympathetic to, but I think targeting the OS level is really problematic. I don't want to give government veto power over what runs on my own devices, especially when that veto power is largely at the behest of corporate bad-faith actors.
It feels like targeting services, a la GDPR, while still problematic, offers a lot better opportunities for getting things right?
@xgranade I absolutely want the government to have veto power over what runs on my devices!
This example is too confused with different layers of harm, so let me give a better example:
Imagine a law which established a Glass-Steagall level of separation between OS vendors and app stores. If you have an OS you can define an app store protocol, but you are prohibited from operating the store or the certificate authority yourself.
App stores become regulated marketplaces like stock exchanges.