macOS grants processes permissions, eg terminal is allowed access to ~/Photos but Whatsapp is not. Seems like a decent evolution of things.