Oh yeah, definitely, but mobile OSes do this fairly well. Windows just asks if you want to give access to everything or not, of course you're always going to click yes, especially if the program doesn't work without it.
How many people on Windows create separate user accounts, run programs as those accounts (hello runas), & set ACLs?