A permissions model that's both safer and less annoying. Clear defaults, granular overrides, and no more guessing what you approved a week ago.