we didn't need it on the N900 because most of the apps were built by the community and were open. Also the small uaer base makes it pointless dor someone to develop malware for tje N900. On the other hand, if the N900 was in the hands of tens of millions of ignorant hands, it would be trivial for someone to make a nicely named app that sends paid sms in the background.