FIle attributes and testing for read, write, execute are wide open to the world. Interestingly, renaming a file, works only, regardless permissions. I did notice Apple xattr (file meta attributes are the only thing that stands out). Since Apple has systematically changed OS "root" authority permissions with Catalina, some of which have also changed with Mojave as well. The updates literally have taken control of specific file folders where cached information resides ~/Library/Application Preferences/, to some extent controlled by Apple. The problem is "poor" architecture of the OS and file system hygiene. The Operating System is separate from App, and separate from User data as it should be. And Apple will tell the OS is 100% secure, but what about App, and User data? I can answer that for you it is a sandbox, previleges for access to entire your archive of photos is not for public consumption.
