I think sandboxing the filesystem by default is a good security measure. For Android it makes sense since you can sideload an app and that always carries risks. I think it can be improved on the UX side without compromising much on security but that is not my expertise. And note that I have not used iOS devices in ages too so I don’t know how they handle the filesystem now.

Thorough and many good points.