[colonial]

macOS kinda gets there. I've (grudgingly) come to admit that it has by far the best security story of any desktop operating system. Apps require explicit user consent to access the filesystem, peripherals, and other sensitive data (e.x. Discord requests "Input Monitoring" access to determine if you're "actively online" even when unfocused.)

The only place it seems to fall flat is network I/O - LAN access requires permission, but dialing out to the wider Internet does not.

Compare Windows, which has jack (except for bloated anti-malware hooks in NTFS.)

Linux is _trying_ to replicate macOS with Flatpak/XDG portals, but those still need more time in the oven.

Source: I use both a MacBook and a Linux desktop daily.