[zxvkhkxvdvbdxz]

A reasonable alternative would be for the app to have no permissions and request permissions from the OS that would either deny access or prompt the user.

Most apps have no business outside their own data/cache folders.

I think the Apple implementation is a good start.

[hulitu]

> A reasonable alternative would be for the app to have no permissions and request permissions from the OS that would either deny access or prompt the user.

A reasonable alternative would be for the app to have no access to the internet and work freely with the available files, just like before. Why must every app be an RCE vector ?

[halJordan]

And yet, everyone hates snap

[bayindirh]

snap is being hated for different reasons. Namely a closed backend, a walled garden, and packages pushed down the throats of users for “creating a positive pressure on the Snap team to do a good job”.