If you ever need to disable SELinux, your software distribution is trash, or you bought some unsupported piece of hardware with crap Linux drivers. Or you are writing kernel drivers and it's your test machine.

What the user really needs is to launch an app in a secure sandbox with two mouse clicks, not an easier way to edit SELinux rules. Linux software distributions focus too much on technology, but don't provide the finished user-facing solution with this technology, that's the problem #4.