You're forgetting a step in your "reasonable approach". How do you expect a user to know whether or not they should grant access for HN.exe to talk to 127.0.0.1 or for mikewarot.exe to access some file?

The reality is the sort of system you suggest almost inevitably ends up being the same as broad permission-based security like current mobile OSes have, because the only scalable decision is "give it access to all resources in a category if it asks and that seems appropriate".

However, those systems DO exist in both Windows and Linux.