To be fair to corporate, Emacs has a pretty terrible security model.

There's no reason a program like Emacs couldn't exist which had something like capabilities baked in, but as it is, every package has access to anything it wants.