Sure but things like web access you can grant access to just the domains your app uses and everything else is blocked same for file access you can grant is acce

Sure but things like web access you can grant access to just the domains your app uses and everything else is blocked same for file access you can grant is access to "views". Though most people will likely just --allow-all because it is easy.