Isn't it obvious? It's that the per app permission for this folder shouldn't fucking be "whatever your OS user can access" or "full disk access" but either fine grained at the folder level - just like "documents" folder has.

If an app needs to read the local social graph it should ask for a permission to THAT folder (or a slightly more general "read social graph data", like we have "read Reminders data"). Not bloddy full disk access or bust.