I think constraining many apps access to the file system is a fine idea. I just think think that mapping files to applications very quickly becomes farcical as the abstraction just clearly doesn't match.

It not even optimally secure. Why for example would your image editor need access to all your image files instead of just the ones passed in via a secure system dialog?

In that instance the dialog would be the checkpoint not the some weird file system borrow checker.