this way if malware tries to target cis by downloading to shared space it will at least have to be allowed by the user first instead of without the users knowledge. on top of shared space offer option to save striaght to the real system like sandboxie. why add this and not get rid of shared space? because by keeping shared space you can choose to have certain things be accessible in both the kiosk and real system. by eliminating shared space this would’t be as easy to accomplish
+3 (+1 for first suggestion about asking when saving to Shared Space and +2 for the sandboxie thingy, at least for downloads)