Internet access. An editor extension does not need it.
One would need some kind of ring system where less privileged processes can call higher privileged processes with their own sandbox permissions.
For example, Android already allows you to give apps restricted access to your media. My understanding of the way it works is that the resulting interface for picking photos etc. is not under the control of the app. The app only receives whatever file you picked.