Mostly fail to see the value in the specific thing you're saying; essentially this is the sort of thing that e.g. free/open source ought to take care of regardl

Mostly fail to see the value in the specific thing you're saying; essentially this is the sort of thing that e.g. free/open source ought to take care of regardless. As in, this is "taken care of" when you agree to install the application; is there any serious reason to believe that security against an "installed application" from a repo benefits from this rather fine grained permission as opposed to what is already in place? And of course the real issue is usually just "the web browser" which, hey, all bets are off.