That’s a major security breach.

Imagine a piece of malware using that same API to spy on other programs…

There’d need to be a way for a user to tell the kernel which app can do that, and that’s a lot of trust to put into a fleeting app that’ll stop working when too few micro transactions are being done and too much trust to put into a user which may may be giving this permission to random programs, which may sometimes be evil.