[jakobegger]

That stuff is not possible if you have a sandboxed app from the Mac App Store.

Sure, if you download software from the web, it can do whatever it pleases.

But if you download apps only from the Mac App store, you should be safe.

On iOS, Apple checks all your software. On the Mac, they give you a choice: If you want "safe" software, go to the Mac App Store. If you want any software, go somewhere else.

The sandbox isn't as complete as on iOS, but the stuff you listed requires special permissions and confirmations when you get your software from the Mac App Store.