[kchr]

> Interesting, I might need to do some reading, > Does macOS have any form of MAC yet, or do they just rely on sandboxing?

Kind of. There is a set of permissions an application can request in order to access protected services and areas of the filesystem, but maybe that's what you meant with sandboxing?

https://support.apple.com/en-gb/guide/mac-help/mchl211c911f/...

[ruthmarx]

That just seems like stuff that requires an admin password.