"classic" snaps are not sandboxed, and you have to acknowledge that when installing them.

"modern" snaps are sandboxed, and you can change their permissions in the Settings/Control-Panel app. You might argue with the choice of permission granularity, but it IS there.