This is getting a lot better with Flatpaks and Wayland (and its "portal" system to access resources).