All apps should be forced to play in it’s own sandbox, and only have toys thrown in to it by the OS upon request and with the established permission of the user. Any system not set up this way is obnoxious
In iOS, they already do, they are sandboxed, and even within Safari, one tab is sandboxed from another. . . but certain system resources are available to all apps.