> we will introduce additional controls to ensure that users who genuinely wish to grant an app this extraordinary level of access can only do so

"Extraordinary" is a funny word choice. It was completely ordinary for most of the history of personal computing that any app you ran under your normal user account could see everything you had.

(I'm not saying this is a bad thing. As long as they allow informed users to continue to do whatever they please, I'm all for it.)