And that doesn’t help. Once an app has permission to your folder along with every other app, it’s not actually solving the problem of an app having access to all of your files.

An app on iOS can only read and write to its own folder in your iCloud Drive by default. You can specifically choose a file in another folder or from another storage provider.