.. just wondering how much effort would be needed to list everything in Maemo (script or executable) that calls sudo.

Once we have that list, we could go one by one sanitizing it (= not assuming that they can get away without a password).