While you're at it maybe you could prevent ransomware by making access to one file different than access to many files? Any application that wants to access ma

While you're at it maybe you could prevent ransomware by making access to one file different than access to many files? Any application that wants to access many files, especially critical ones, should require special permissions, perhaps a USB access key. For critical infrastructure this could be very useful. Spawning threads for each file should be detected and require the same special permission. Emergency access could be provided via a physical "break glass" mechanism that triggers logging and an alert on the network (perhaps even via an independent mesh network based on cheap ESP32 chips). Sure it would cost more, require some OS changes, and be a hassle to use, but for critical infrastructure those costs seem worth it. I know computer science has studied such things, is there some known roadblock to implementing this? Perhaps it was viewed as making system administration too tedious but I haven't seen any other ransomware solutions [backups (which will not stop blackmailing with stolen data) and kill cryptocurrencies (not possible internationally)] that make much sense so maybe it is time to reconsider, the costs may be worth the protection.