Hacker News Reader

But it doesn't have to be such a shitty compromise. Most desktop applications could be made such that you have all the security and the convenience.

Separate user for untrusted apps is the proven way to do that in UNIX. :-/

That can happen under the hood, but the user should not have to deal with that