The arbiter of what can be accessed should be the user, and always the user. The OS should be merely the enforcer.

Currently OSs are a free-for-all, where the user must blindly trust third-party apps, or they enforce it clumsily like in macOS.

This was fine in 1980 but isn't anymore.