Not by default. It’s not inherent to it at all. I’m honestly not sure how it does, given the idea would be to restrict FS access to only files the user grants p

Not by default. It’s not inherent to it at all. I’m honestly not sure how it does, given the idea would be to restrict FS access to only files the user grants permissions to read / write, so they can’t write arbitrary things to the file system. There’s other techniques they can use to make it blind / privacy focused as well