A very limited scope of the filesystem instead of exposing the whole thing. Android does the same thing, and so does every system that doesn't allow the user to have root access.