Android has this but it works on the app authors side. Each app has its own private storage space where other apps and even the device owner(!!) can't access. There is then a shared /sdcard folder which apps must request permission to use (Access device storage). Tiktok is requesting this sdcard folder access and dropping trackers in it. Android does allow you to deny this permission but the app will probably require it to share images (Even though I'm pretty sure android provides a ui for sending images without storage access)