Earlier quoted context omitted.
Generally the way I've seen sudo implemented in all desktop linuxes is that after providing a password the process gets all access. This to me isn't a great trade off as it relies on the user invoking the process understanding the security risks they're taking, which is a tricky one. Sure you can do more with sudo, but unless it's the default, most people won't
There's room for improvemnt, it's just the best trade off I've seen. Windows has it's "click yes to continue" buttons, android has it's permissions thing that is useless to everyone. At least making people pause and type a password might make them think about what they're doing a bit.
You're more likely to think twice when you open your flashlight app and it asks "Do you want to allow [Flashlight App] to read all your contacts?"