Apple tightens macOS Full Disk Access controls, citing risks from AI agents

[PlanckLimit65]

Apple says it will add more controls to a macOS setting called Full Disk Access, and it has named the rise of autonomous AI agents as one of the reasons, TechCrunch reports. The setting was originally designed for tasks like backups, and it lets an app reach "files, mail, messages, and even browsing history". Under the new controls, users will only be able to grant this access with "very explicit user action." The change is about informed consent rather than a hard block, according to a correction TechCrunch added to its story

Apple's explanation is unusually direct. It said "some developers are using Full Disk Access in ways that could put users at risk," exposing everything on a system without users fully understanding what they had agreed to. It added: "As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially." That is a big platform maker openly saying that agent software changes the security picture

Two incidents came before the move. A journalist claimed that Meta's Muse app on Mac had read their private messages, which Meta disputed. Separately, a flaw was found in ChatGPT's Mac app that could have allowed hackers to reach sensitive data. Both show what can go wrong when powerful apps with broad permissions sit on a personal computer

The article does not say which macOS version will include the change or when it takes effect. But the direction is clear. Many AI agent tools work best when they can see everything, from emails to documents to browser history, which is exactly the kind of access security teams worry about. Apple seems to be betting that users will want more friction here, not less

Would you give an AI agent full access to your computer? And is Apple right to make it harder, or will this just push agent developers towards other platforms?

Apple says it's tightening macOS 'Full Disk Access' controls due to new risks from AI agents | TechCrunchtechcrunch.com

[Rory84]

Absolutely not. An agent that can read every message and email I have ever sent is a privacy disaster waiting to happen

Even if the company means well, one bug or one breach exposes everything. Convenience is not worth that risk for me

[Wendy99]

Interesting that Apple named AI agents directly. Usually these changes are framed in vague terms about privacy. Calling out agents suggests they see a real shift in how apps behave

[Foden]

I use Full Disk Access for my backup software and nothing else. If the new controls just mean one extra confirmation step, that seems fine

[PeakTime]

That Muse story is worrying, even with Meta disputing it. If a big company's app can be accused of reading private messages, smaller developers will be even less careful

Whatever the truth of it, the accusation alone has damaged trust. That is hard to win back

[Dylan54]

Agents are only useful if they can see your stuff, though. An assistant that cannot read your calendar or email is not much of an assistant

There needs to be a middle ground, with access limited to specific folders or apps. Phones already do this with photo access, letting you pick specific albums. A similar model for files would work well