Oh, the hatred was already there. See any number of equally broken and hated attempts like Symbian Signed, Trusted^W^W^W^W^Weacherous Computing, Tivo etc locked devices, and more recently UEFI boot.
That's not what it's for. It's designed to protect the "content" (and by extension the device and content vendors' business models) from you, the owner of the device, and in order to do that it puts your computer under the control of everyone in the foodchain except you.
And if you believe Aegis can protect you from that I've got a nice bridge to sell you too ;-) Trivial proof: inception.
That, and an active community with decent skills, peer review and responsiveness is the only thing that can work IMHO. Cherry was a good example around these parts.
That doesn't work. You either end up with too coarse granularity (Android) or too fine (SELinux).