When you run a program under almost any operating system, the operating system assumes you trust it. The code can open any file you've got permission to access, open network ports, etc. The code is you as far the operating system is concerned, and carries with it all of your authority. The assumption that code can just do whatever it wants is baked into everything.

There are permission flags on your Smartphone and other places that curtail this a bit, but those are rather course grained all or nothing decisions. Those are like either handing over your wallet, or not, to the clerk at a store to make your payment.

There are better alternatives possible, I'm hoping they get here soon. Genode[1] is one such system, that offers capability based security, where you chose what resources to hand off to code, instead of giving it everything. This model of computing is called Capability Based Security[2].

[1] https://genode.org/

[2] https://en.wikipedia.org/wiki/Capability-based_security