So the capability-based security framework is not missing unlike your original statement?
charcircuit
My original statement is about how users have to explicitly give programs access to the files and the webcam before they can use them. This is missing.