Its been this way for a long time, but macOS apps through the app store essentially ship in a sandbox with the ability to configure permissions.

And there are now solutions that are very similar or the same on Linux (flatpak, appimage, snap with their very degrees of isolation). Windows, I will admit, I don't know much about it, but it may be the odd one out on this.