Couple of questions, Bart:
1) don't ALL installers have to request administrator privileges on OSX, in which case you've said to be suspicious of all installers? (which might be exactly what you meant to say)
2) it would seem to me that this concept was always possible - if I actively download and install an app, I would expect it to be able to do just about anything it wants. Is this exploiting a specific hole in OSX or just a specific hole in our naivety?
3) it always bugs me when people say "trusted sites" - what's a trusted site? sony.com? You see what I mean, right? Obviously porn sites as a whole should be on the untrusted site list, but let's say I'm looking (like I was last nite) for a .mov to .wmv converter. I've tried all the usual suspects, so how do I tell if the sites I'm going to are "trusted"?

good article,
Allison
NosillaCast at http://podfeet.com
A technology geek podcast with an EVER so slight Macintosh bias!