Apple Tightens macOS Full Disk Access, Citing AI Agent Risks

Apple is adding new controls around macOS Full Disk Access, and is naming AI agents as the reason.

In a statement to TechCrunch, the company said: 'Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems…without users' full knowledge and understanding.' Users who 'genuinely wish to grant an app this extraordinary level of access,' Apple said, will be able to do so only with 'very explicit user action.'

Full Disk Access is a macOS permission that covers files, mail, messages, and browsing history. It was originally built so backup software could work. Reporter Sarah Perez pointed to two recent incidents behind Apple's framing: Inc. columnist Jason Aten said Meta's Muse app read his private messages without permission, which Meta disputed, and Wired documented a flaw in the ChatGPT Mac app that could have let attackers reach sensitive data.

Apple's own words carry the judgment: 'As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially. We are committed to ensuring users clearly understand these risks before granting such access, so they can make informed decisions about their own data and privacy.'

The statement names no macOS version, sets no date, and quotes no Apple executive. It lands the same day Microsoft's annual threat report argued AI has tipped near-term advantage to attackers, and continues a run of tracked Apple coverage on our radar this week.