Currently there appears to be no easy way to limit the shell.open api in tauri to only allow access to user files. There is a regex pattern, but I don't think there is a good way to limit using regex patterns to a user directory. This would need to be os agnostic.