As I mentioned in the syncthing forum, I see the syncthing case very similar to the editors. We need to read and write files in locations chosen by the users, and sometimes those users will want to access sensitive locations. Some parts of that are being discussed here: