Your proposed solution and criticism thereof presume that there is only one way to delegate trust to a web app and that it should entail that the user understand UDP.

Consider Tim Berners-Lee: http://lists.w3.org/Archives/Public/public-webapps/2012JanMa...

And Alan Kay: http://www.drdobbs.com/architecture-and-design/interview-wit...