This article is addressing sandboxed applications. Regular applications, yes, you can pretty much do whatever in userspace in Win/Mac/X11. If you're going to c

This article is addressing sandboxed applications. Regular applications, yes, you can pretty much do whatever in userspace in Win/Mac/X11. If you're going to create a new sandbox environment for applications (Windows Store/MacOS store) in today's world, it really needs to be locked down with explicit permissions for each type of I/O access.