All these are great, but the downside is that they are not interactive — you have instead static profiles that specify what is allowed and what not. In contra

All these are great, but the downside is that they are not interactive — you have instead static profiles that specify what is allowed and what not. In contrast, think of mobile OSes where you are prompted (interactive!) whether to allow an app to access/do X.