Basically every app is sandboxed to some extent. That way you don’t get conflicting dependencies. Because I use this machine for work, game performance is a much lower priority than file system permissions and stability and for most typical workloads. MacOS does the same thing by default now and very few apps get access to the actual root directory.