Ultimately the compositor IS the desktop environment. You can try all you want to keep it simple and enable functionality via other apps using a protocol, but that's essentially a complicated way of making plug-ins to the compositor. You will end up delegating security to everyone else.
That's not true. It's true for GNOME, and I guess Enlightenment, but they are not the only players. If you think there are legitimate security concerns with our approach then I'm open to hearing them but so far as I'm concerned so far you haven't said anything of value.
