I'm actually surprised that Mac, Windows, and Linux are not way more locked down by default by now. We see the problem on Android and iOS often have binaries d

I'm actually surprised that Mac, Windows, and Linux are not way more locked down by default by now. We see the problem on Android and iOS often have binaries doing bad things (spying if not worse). Often it's not the app developer themselves it's some library they included. Then we have stay Steam users (maybe that's mostly Windows) but basically every game they download could be installing anything, reading anything. Root kit, key logger, network monitor, sending your private keys somewhere, reading your email database, downloading your documents. There is absolutely nothing stopping that at the moment except trust. A few games have already been caught spying by using 3rd party libraries. Mac has appeared (not a security expert) to have gotten slightly better as of Mojave. Several folders in ~/Library are not readable by default and permission is given per App. (type ls ~/Library/Mail). But basically I think I'd like things to be way more locked down by default (with of course ways to open it up per app). I'd like to be able to run an app (not just an App store app but any app) and be relatively sure it can't do anything bad. That includes command line apps. I wish every app was run in a sandbox. I'd like to able to run any app or script and know it's not uploading ~/.ssh/id_rsa for example.