Yet in 2017 we only have application level permissions widespread on mobile OSs, and we still bother the user to click "Yes" or run through a sudo prompt to do trivial OS configuration tasks.

Not to mention that this entire discussion takes place in the context of a MacOS "feature" that literally makes it impossible for the user to change the OS configuration.