It's a rather all or nothing approach. You either trust it to access everything, or you don't run it at all. There's no middle ground. This is something I rather appreciate about Deno versus Node. There was a demonstration where cowsay was asking a bunch of permissions to things you wouldn't expect cowsay to need. And apps could update to increase what it accesses, like telemetry, and you wouldn't know or have any means to stop it. And the all or nothing approach means you just have to stop using the app entirely.