Some really nice folks are trying to figure out the whole "not iTunes" issue - it's called hyperamp: https://github.com/hypermodules/hyperamp
HN hates election apps :-/
Just because something runs under my id, doesn't mean I want it to read everything I have in $HOME without me knowing about it, and possibly sharing it with the world.
On my systems, every sandbox option I can enable is turned on.
Here's one in Swift.