[jezek2]

That exists and it's called web apps. For native apps you need the exact opposite, access to everything otherwise it can't do the useful integrations and provide the best experience for the user, which is the point of native apps.

You have to trust native apps, as it always was the case. You can't just install random apps. You can delegate the trust to a curated lists of apps that you trust.

Or you can just use the web apps, but then you have to trust them too (so they don't misuse information about you or your data for example). But then it can't integrate with anything and many features are simply not available.

As for your example, a photo editor could need a network connection when it contains collaborative features. Or an auto-update system. Or downloading of assets on demand. Or cloud AI feature. Or list of add-ons to install. Or for license checks. Or online help/docs. Or whatever.

[stackedinserter]

Why do I "have to trust native apps"? I owe them nothing and they can happily work in a sandbox where they have access to a their own folder and files that I allow them to use. If I decide they don't need network, then they don't need network.

> a photo editor could need a network connection when it contains collaborative features. Or whatever.

Or none, if I decide to not allow it.