I agree but you can try to install Parallels Desktop for macOS from appstore for example. You will see on first run a TCC prompt to access Download (or Desktop) folder. How can they do that ? There are no NSOpenPanel dialog

And do you know how endpoint security solutions on app store can obtain full disk access ? Thanks

It does not work for sandboxed/appstore applications...

Thanks but is there a way to "reset" all intents ?