You've missed the point. "Trusted", signed applications can do the same things this PoC did.