Is catfish the new default in the Qubes Domain open file manager quick widget for whonix?

There’s indeed a new security feature which might be causing that. It’s not yet documented, will be documenetd soon. Meanwhile you can find the draft documentation which is probably “approximately correct” here: