[sneak]

https://www.xkcd.com/1200/

All except macOS let anything running as your uid read and write all of your user’s files.

This is how ransomware works.

[fsflover]

You forgot the actually secure option: https://qubes-os.org