file:// can access any file on your computer, out of the box.

Localhost cannot (unless you set it up that way, which requires user action)

That’s why.