This actually points to an underlying weakness of the Unix/macOS permissions system: There is no concept of apps. By now the filesystem permissions hierarchy r

This actually points to an underlying weakness of the Unix/macOS permissions system: There is no concept of apps. By now the filesystem permissions hierarchy really should be extended into Group → User → App. You can see the half-baked workarounds many operating systems use like controlling access to entire folders like Documents, Downloads, Photos etc. Why not just make it fine-grained and let us permit and deny apps' access to individual files, and see which app created which file?