The New Paved Road: securing apps built by everyone