It is far past time that Desktop OSs stop treating applications like something that can be trusted by default. I hate a lot of things about mobile, but mobile OSs more or less[0] got it right by sandboxing everything unless told otherwise.

[0] The permissions-grating mechanism needs work, but the base concept is sound.