Apple tightens macOS Full Disk Access controls due to risks from AI agents

Summary

Apple is tightening Full Disk Access controls on macOS, citing the increasing risks posed by AI agents capable of reading file, message, and browsing history. Going forward, granting this permission will require more explicit user consent.

Why it matters

Desktop AI agents are becoming increasingly autonomous. The Full Disk Access permission, originally designed for backups, provides these agents with broad access to personal data, far exceeding what most users realize they are authorizing. This move highlights a structural trust gap in how operating systems grant permissions to software that can now not only read but also execute actions.

Highlights

• Apple will now require a 'very explicit user action' to grant Full Disk Access permission.
• This change follows allegations that Meta's Muse app read a journalist's private messages without authorization, though the claim remains disputed.
• Apple acknowledges that some developers have been using Full Disk Access in ways that could 'put users at risk.'

Critical take

Apple's response is clearly reactive. Even before the emergence of AI agents, this permission model was dangerously broad. However, the company only acted after public debate and a security flaw in a competing application. Apple has refused to clarify exactly what will change and when, leaving developers and users to speculate about the practical implications.