> preventing the running of unauthorized code, which keeps malware off the platform.

This is neither a necessary nor a sufficient condition for controlling malware, yet you speak as if it is both.