Comment by snibsnib

GrapheneOS has Storage Scopes that does exactly this. (https://grapheneos.org/features#storage-scopes)