The onus isn't on the environment owner to lock down app space and secure data to the nth degree, it's on developers not to ship poorly behaved apps. My files don't exist in a public space like they are rubbish on a residential nature strip, free to be pilfered by randos. They aren't free game in any way.