Comment by mindslight

An OS that represents the user would be able to grant the permission to scan only an arbitrary subset of the filesystem, with the application being none the wiser. We need to start seeing the lack of such functionality as a security vulnerability.