I'd like to see a transparent ledger for software releases, to make targeted malicious update attacks detectable.

Similarly, pinning the hash of the index resource for a web site using a transparent ledger could let web apps be as secure as native apps with auto update.