Microsoft didn’t provide a way for fine grained control of things. Oftentimes apps need UAC permission for ridiculous stuff that should be available to provide access to once and never again. I’ve written shitty windows apps before and I remember thinking it was dumb then. It’s just even worse now.