And I think there is a big difference between "system" and "applications". It is not like this is hypothetical magic or unexplored, see any sandboxing ever or Android and iOS, where an app can't even access another app's files without specifically asking for permission.