@novenary I think the broken model has been around for so long that it's pretty difficult to transition people over to something safer.
Mobile OSes have gotten away with compartmentalized apps since there wasn't really a 20+ year old existing back catalog of applications that had to be sandboxed after the fact.
Desktop OSes unfortunately do have that downside. The biggest thing is that users generally expect to be able to access everything that their user can access through desktop apps (e.g. uploading files)