Apple could’ve opted to use the same (open, portable, privacy respecting) mechanism the euID architecture offers for such cases but of course Apple doesn’t do privacy, portable or open.