I understand the motivation, but the implementation results in little more than security theater in practice.

If you say "yes", the program can do almost anything and you'll have no idea what it's actually doing. If you say "no", you often can't use it for its intended purpose.

They took the iOS model and applied it to their desktop OS and it's just lazy and broken.