Sandboxing can do things yes. But it's fairly undocumented. Deprecated. And it's not used nor set up by default. What I'm asking for is: - Sandboxed applicatio

Sandboxing can do things yes. But it's fairly undocumented. Deprecated. And it's not used nor set up by default. What I'm asking for is: - Sandboxed applications. Perhaps something similar to containers where __I__ decide what I/O is allowed - I don't want to rely on manual checks by Apple. It only works partially. Sandbox and security interfaces should be simple and user friendly. I don't want to create a massive sandbox configuration file by hand.