Note that the process described in the post is a better experience than other block/allow interfaces, because you _can_ specify per library what things it can o

Note that the process described in the post is a better experience than other block/allow interfaces, because you _can_ specify per library what things it can or can't access. You aren't forced to specify everything at the process or user level, where it can be harder to list or specify such things. There will still be the possibility of confused deputy attacks, but it still looks like a significant improvement to supply chain security.