In my personal experience, the only way to achieve something like this at the moment is by utilizing : GrapheneOS.
With this you can enable Storage Scopes for app that you want limited access to your storage.
I believe you cant just add a storage scope to obsidian and call it a day but u need to add storage scopes to all the apps you want to restrict they access.
Hope this helps,
b.