At least groups are no longer necessary for most things on the desktop; udev/policykit take care of adding/removing ACLs on device nodes as users log in/log out/active/deactive their terminals.
Being able to revoke access to a file after the user has opened it, however, would still be useful...