macOS does something similar already for file open/save dialogs: they’re drawn by a trusted OS component instead of directly by the app, and the user’s act of s

macOS does something similar already for file open/save dialogs: they’re drawn by a trusted OS component instead of directly by the app, and the user’s act of selecting a file grants the app permission to access that file without an additional dialog.