Unless you or someone you trust has audited an application, all apps are untrusted and should be given least privileges (e.g. the mobile/UWP model). Personally

Unless you or someone you trust has audited an application, all apps are untrusted and should be given least privileges (e.g. the mobile/UWP model). Personally I'd suggest that the trade off is whether the risks of global filesystems are worth it in productivity benefits. For standard users (non IT-professionals) I think they are not and for IT professionals, in most cases, I think they are.