This is implemented the wrong way around. Each program should only have access to its own folders by default, with it being possible to grant additional access.

This is implemented the wrong way around. Each program should only have access to its own folders by default, with it being possible to grant additional access. Also, I don't believe Endpoint stuff is included in the normal Windows license.