The only walls that need to be in place to prevent this are against malicious carrier app stores. There's no need to restrict users here, which is what people complain about.

Stopping carriers from ruining phones is quite popular on HN from what I've seen.