UWP on Windows has a comparable sandbox and permissions system, although your post still probably describes the practical reality for most Windows users at the moment unfortunately.