> or to install LaunchAgents and whatnot without having to document that anywhere Yes! All OSs have this problem (I think that's what you meant later too?). Th

> or to install LaunchAgents and whatnot without having to document that anywhere Yes! All OSs have this problem (I think that's what you meant later too?). There are two ways to solve this: a) Put applications in their own containers (I believe that's what Android and iOS do?), and have them have to ask permission when wanting to access files outside b) Have something like lsof attach itself to every application process (_like_ lsof, not actually lsof, because although you could get it to work, the costs would make it impractical) Unfortunately, I think we're heading towards option (a).