I'm hardly finished being happy about my purchase, but I've (of course) already started to think about the more technical parts of OpenMoko.
As far as I could figure out, everything are being executed as the root-user. If thats right, it's a huge mistake - in my opinion. One can argue that the (most) end-users are not able to manage a user-hierarchy/-system on a device like a mobile phone - and it's neither a multi-user system - but still, I think it at least should be possible to change.
For a long time mobile phones have been a far less popular target than ordinary computers, but that's almost certainly going to change sooner or later, and OpenMoko could as well implement a better security mechanism from the beginning and take advantage of a more secure system. One could even imagine that it could be a buzz-word in the marketing-process.
Well, please let me know whether OpenMoko always uses the root-user even at executing regular applications.