I get where this comes from, but I don’t think it’s that absolute.

There are apps that are designed so they literally can’t access your data not because they’re more trustworthy, but because the architecture removes that possibility.

The problem is those approaches don’t map well to common business models (ads, subscriptions tied to engagement, etc.), so they’re much less common.