How is preventing apps from spying on each other through the display manager not justified? That's the lowest hanging fruit for desktop sandboxing.