Just a comment about snaps. The snaps would have the same kind of problem, if convenience is a factor.
But most importantly, these security issues should be communicated to the user. If convenience is a critical and important default.
"The [snap|browser] you've just installed is secured against general threats that aim to modify local files or install unwanted software. However, it allows almost unconfined access to the files in your HOME directory, including any sensitive files you might have in your Documents directory. Please take a look at <...> if you wish to further restrict this access."
Just a comment about snaps. The snaps would have the same kind of problem, if convenience is a factor.
But most importantly, these security issues should be communicated to the user. If convenience is a critical and important default.
"The [snap|browser] you've just installed is secured against general threats that aim to modify local files or install unwanted software. However, it allows almost unconfined access to the files in your HOME directory, including any sensitive files you might have in your Documents directory. Please take a look at <...> if you wish to further restrict this access."