Before Android 10, any app with the READ_EXTERNAL_STORAGE permission could access every photo, document, and download on your device. A flashlight app could read your camera roll. A wallpaper app could scan your Downloads folder. The file system was a free-for-all, and users had no idea.