[amluto]

There’s a universe in which your Mac is a locked down device like your iPhone, with a proper immutable filesystem, carefully controlled persistent state, and a strong sandbox in which the terminal, Homebrew, and apps (App Store and otherwise) can act within the sandbox but cannot do things like, say, reading your entire iMessage database.

We do not live in this universe. Consider getting a Chromebook instead if you want to be in that universe. (But then you have a tradeoff: Apple itself seems pretty good about not using your data inappropriately. Google, not so much.)