>If such a user wants to run untrusted programs, he'd use a virtual machine anyway.
In your imaginary world. Real users don't know what a VM is and expect their system to be able to run untrusted programs without exposing all of their data. Which they are able to do on most modern systems.