Earlier quoted context omitted.
This is incorrect, apps installed through the macOS App Store have required sandboxing since 2012. Since 2018, Microsoft is also attempting to get developers to sandbox more apps, see more about that here: https://news.ycombinator.com/item?id=36059982
I'm pretty sure you're wrong. Looking over the part where you imply that the MacOS App Store is the standard way to install Applications on MacOS (opposed to dragging the application to the Applications folder), let's look at what the system you're referring to actually does: https://developer.apple.com/documentation/xcode/configuring-... Show me where it says a program installed from the MacOS appstore will be unabl…
That is the standard way. An app that has its own custom installer or patcher/updater is by definition, using a non-standard install procedure.
But even if it wasn't, it definitely is the standard on Linux, where package managers are the norm.
>The application developer grants their app the entitlements to read user files.
Flatpak works in exactly the same way.