> Windows does all of those, in addition to fine grained access controls. Aren't those still user-based? So, in the typical case of a single-user computer, a r

> Windows does all of those, in addition to fine grained access controls. Aren't those still user-based? So, in the typical case of a single-user computer, a rogue app that I run with my account would be able to access my data. There's the protected folders thing (not sure about the name) since a few versions ago, which attempts to block random apps from accessing random folders. But it's opt-in (folders are not protected by default, you have to add them one by one). It's also all or nothing: either a given app is "untrusted" and it can't access any of the protected folders, or it's "trusted" and it can access all of them. I can't say I trust Photoshop to only touch my pictures folder, but not my .ssh folder.