> 'd like to see something in Android that gives an app file access with less access than "all files".

SELinux has been able to solve that problem in Android for a long, long time now. Which is more appropriate, as you say it should be the job of the OS.

The problem is the age old one where users want convenience at the cost of security.