I think Android has a more saner system, but I’m a layperson when it comes to these — android runs every user process under a different user that has very restr

I think Android has a more saner system, but I’m a layperson when it comes to these — android runs every user process under a different user that has very restricted access (restricted with SELinux as well), and they do extensive IPC. There is a daemon that handles elevated requests through IPC, so that’s where dynamic access control happens.