I'm not sure what you mean by “stop the OS from being a playpen”.
Screen readers would need permission to read accessibility trees from other apps, and permission to play audio. They should be denied permission to use the network or write to the file system, so that they cannot exfiltrate this potentially-sensitive information.