No human should ever have to blindly trust a program to do the right thing. That is the job of the operating system.
The OS should make it easy to select the resources that a program is allowed to access. It should be as easy as taking a dollar bill from a wallet.
The OS should make NO other access possible for the program to be run.
This, ladies and gentlemen, is Capability Based Security... something we've needed since the 1970s, but everyone dismissed as too complex, slow, or unnecessary