This is only a vulnerability because macOS actually tries to sandbox access to user data (photos, documents, etc). On Windows or Linux being able to access all

This is only a vulnerability because macOS actually tries to sandbox access to user data (photos, documents, etc). On Windows or Linux being able to access all a user's data is expected, and thus spyware and ransomware don't even need administrator privileges to wreak havock. So, a win for Apple here.