Apple should make “start up at boot” a sandboxing entitlement with a consistent permissions UI like they do for enabling location or file access.