You can have permission models for these things. I am not asking for untethered access to the entire machine without any permission. I fully agree with this. T

You can have permission models for these things. I am not asking for untethered access to the entire machine without any permission. I fully agree with this. The ideal model if Apple cared more, would be: fully sandboxed by default, the application can ask extra permissions. But given that Apple does not do this, for me as a user 'sandboxed' is a better default for me than 'not sandboxed'. I can install/purchase the few applications that are absolutely impossible without sandboxing (e.g. VMWare) outside the App Store.