> but nobody does because it’s a terrible experience To be fair, all apps from the App Store are sandboxed, including on macOS. Some apps that want/need extra

> but nobody does because it’s a terrible experience To be fair, all apps from the App Store are sandboxed, including on macOS. Some apps that want/need extra stuff are not sandboxed, but still use Gatekeeper and play nice with SIP and such. FWIW, according to Activity Monitor, somewhere around 2/3 to 3/4 of the processes currently running on my Mac are sandboxed. Terrible dev experience or not, it's pretty widely used.