Hacker News new | ask | show | jobs
by ridiculous_fish 2378 days ago
It's enabled by copy and pasting because the pasteboard carries capabilities.

I agree it's a bug that these cannot be removed, but it's not user hostile. You wouldn't say Linux is "extremely user hostile" because it allows Terminal to access ~/Downloads without prompting.

This is an extra layer, it alone does not give the app access. Apps which retain this permission are still governed by sandboxing and filesystem permissions, just like on Linux and Windows and Mojave.