Windows desperately need a good sandboxing system like Flatpaks and Android apps. User apps should not be able to read all your data unless you authorize them