The app is split into multiple layers.

Just like your browser can do everything already, but only lets websites use specific features.

Right and you rely on that browser to enforce those protections. But if the browser itself was working against you, then the permissions you tell it to give (or not) become meaningless. A good example there is trying to turn off "telemetry" on Windows.