All except macOS let anything running as your uid read and write all of your user’s files.

This is how ransomware works.