I disagree regarding the data ownership, but I agree that a separate application could be a solution. Then those who agree with you regarding the ownership can use that separate application, and those who don't can just refrain from even installing it.

But I doubt it would be enough for MS. It would be very easy for a user to move stuff out of that provisioned sandbox.