I don't mind a new security model for personal computing, one that sanely quarantines - or containerizes or sandboxes - an application. Any browser or App proc

I don't mind a new security model for personal computing, one that sanely quarantines - or containerizes or sandboxes - an application. Any browser or App process has nothing good to do in ~/Library other than its own application support and prefs plist files (and the equivalent in Linux and Windows) If an App needs to access any artifact in my $HOME it needs to be explicitly authorized for that specific one (e.g. I want to embed images in a presentation) by a UI element that is part of a the OS itself. Right now, I might be running as root on my machine, because as soon as I'm 0wned, my whole life can be siphoned to some dodgy server on the net.