> Last excuse I saw was "we need to scan for subtitles". Yeah, right.

Yeah, that's not even a valid excuse! Once a user manually selects a file, the macOS sandbox also gives an app access to any "associated" files like subtitles, automatically:

https://developer.apple.com/library/archive/documentation/Se...

(search for "subtitle" on that page)