> at the end of the day, when you run an app on Unix, you're allowing it to act as you with all the powers your user has.

This is not at all how it works on macOS, which is what is being discussed in the original post. There are a million different things that require per-app explicit opt-in permissions. This is a case of user error.