Android is built in the Linux kernel. That’s actually some of what causes this - Android’s permissions model takes the Linux model and amplifies it. Apps are treated like users to prevent them from messing with each other’s files. If an app uses Android’s downloads manager it can write to the downloads directory, but it can only see the files that it put there.