macOS and iOS use a completely different mechanism to ensure a game doesn’t read my contacts or make network requests. It has nothing to do with Unix-style users.

They could have built that on top of BeOS just as well as on NextStep.