Per-application permissions, sandboxing applications, and one-click installs are great for the users. I'd like to have a filesystem like Plan 9's, where an app

Per-application permissions, sandboxing applications, and one-click installs are great for the users. I'd like to have a filesystem like Plan 9's, where an app cannot even see outside of its box unless I let it. But for some apps I'd like to let it. Preventing an app from opening other apps or arbitrary files if the user desires is awful for the users. Siloing data so that a user cannot use an arbitrary application to read a PDF is awful for the users. One-click installs and refusing to run unsigned apps is awful for the users when the only CA is Apple or Microsoft. All of the current systems are poorly implemented. They could either be a step forward or two steps back. I'm not sure of the direction they are taking yet.