I think that just emphasizes we need better desktop application sandboxing. If I could trivially say this app does not get network access, restricted to this f

I think that just emphasizes we need better desktop application sandboxing. If I could trivially say this app does not get network access, restricted to this file system directory, can only read the supplied file, etc why should I have to live in fear? Granted, now that everything "needs" the internet quite a few of those limitations are meaningless, but I can dream.