I like the way macOS handles this - .app package files are just folders that the OS treats as an icon; you can introspect if needed and the app can store its preferences etc inside the app container so it’s even portable (for user, not to deploy but mainly backup).

If the app needs access to folders it asks for it (even ~/downloads) otherwise it has nothing by default.