Haugen: If Facebook surrenders ability to spy it cannot protect users

Or they could give users the tools to scan for malware with appropriate local permissions and only phoning home with permission?