>You're still free to allow every app on your computer full access, I won't.
Sure. Do I have to reboot the machine and put in special commands in the UEFI? Will the next OS update then revert that on me anyway? Will they silo all the data on a per-app database, then make the machine unjailbreakable?
I have little confidence that I am still free to do this much longer.
That's a reasonable concern and I do hope that there's an escape hatch, but it can't be as easy as "click here for full remote control" or else most people would just do that and fall victim. This already happens regularly and it's what privileged dialogs aim to prevent.