This is very interesting...

So basically, attempting to fix the problem the Mac way just "fixes" the application's "wrapper", but the actual contents of the package are vulnerable?

And Apple thinks the fix for this would be an "enhancement", rather than its actual existence being a bug?

You should submit this to Digg or Reddit or something.