On: Updates to Full Disk Access in macOS

[spaqin]

Accessing any website is basically Remote Code Execution, but for some reason starting up a browser isn't a CVE.

[etatester → spaqin]

Good example because all that code is indeed run sandboxed, which is exactly what we need in native apps as well. "Any website" cannot access anything on my computer without explicit and often temporary permission.