. . "There is no need for an application to have full and unrestricted access to the whole system, except if that application is something like Gparted or cfdisk or the Web Browser itself to actually manage access rights." . .