Pretty sure that’s how it works on iOS. The app can only access its own sandboxed directory. If it wants anything else, it has to use a system provided file picker that provides a security scoped url for the selected file.
There’s also a similar photos picker (PHPicker) which is especially good from 2023 on. Signal uses this for instance.