Ai

Treating “let Siri use a different model” as a configuration toggle skips the hard part. Permission mediation has to live in the operating system to exist at all.

Take file access in a sandboxed browser. Websites have legitimate reasons to read files, and the correct design is a system file picker that any browser can invoke. The user grants scoped access deliberately, once, and never gets worn down into handing over the whole disk. Safari building its own version would defeat the purpose. That paradigm took years to arrive at.