Not sure if this is what OP was getting at, but it's possible that the attack vector will baloon if more 3rd party apps are pressured to provide logical scripting interfaces

Considering Apple has been locking down the system with App Store distribution and Gatekeeper (and sandboxing), the attack vector risk will probably be constrained.