Filesystem ACLs do not cover as many use cases as TCC or similar APIs. Suppose you want to give an agent access to only some of your messages stored in one SQLite database. ACL cannot restrict access to particular messages. Same goes to let an agent access your screen, even on linux where basically everything is a file, file based permission would not be enough. What if you want to share only a window for instance?

This is what dedicated higher-level APIs (like ScreenCaptureKit on mac or XDG portals on linux) are made for.