When a user selects a “protected” file or folder in an NSOpenPanel in a non-sandboxed app on Catalina, consent is inferred and the app can access it.[...]well, it’s complex, and more of an implementation detail than I care to go into here on DevForums.