Apple said on October 2 that it would update macOS so users must take more explicit action before apps, including AI agents, receive Full Disk Access.

The company said some developers were using the permission in ways that could put users at risk.

On macOS, apps are sandboxed by default. Full Disk Access can let software read protected data from other apps, including Mail, Messages, Safari, backups, and some system files.

The change follows criticism of Meta’s Muse, an AI agent that can connect to user data sources through optional integrations.

Meta said Muse could access Apple Messages only if users enabled both Full Disk Access and the Messages connector.

Security researchers documented repeated ways attackers could bypass macOS privacy controls.

🔗 Source: Reuters

Recent Apple developments