Yes, and I also agree that there are substantial unsolved problems in making such fine-grained systems practically useful for non-expert users. I’d like to see

Yes, and I also agree that there are substantial unsolved problems in making such fine-grained systems practically useful for non-expert users. I’d like to see the industry moving in that general direction, though. Even a much simpler model could bring real benefits relative to the status quo, where in application terms our current security model is analogous to everything being root.