I will be honest and reveal my naivete about the permissions. I don’t really mess with permission for any program, but I can see how some defaults may be bad.
I will look into bubble wrap, since the sandboxing is important, but the sheer convenience and availability of software is what is appealing.