> I'd rather have restrictions as the default

Then don't install apps and use the web, mobile sandboxing is much weaker compared to any modern browser.