Apple plans tighter Full Disk Access controls in macOS as AI agent risks grow

Apple says it will add stricter controls around Full Disk Access in macOS, a permission that can let Mac apps read broad areas of a user's system. The company framed the change as a privacy and security response to apps that request unusually deep access, and it singled out the rising autonomy of AI agents as a reason the old consent model needs more friction.

Full Disk Access exists for legitimate software such as backup tools, but Apple said the permission can sidestep normal privacy protections. In its developer notice, the company said some apps use the access in ways that could expose files, mail, messages, and browsing history without users fully understanding the scope. Apple also warned that communication apps with this access can affect the privacy of people a user talks with, not only the Mac owner who approved the prompt.

What changes for users and developers

Apple has not published the exact user interface or release timing for the new controls. Its direction is clear enough for developers to start planning: apps that ask for this permission should expect a more deliberate approval path and more scrutiny from users. Apple said future access will require very explicit user action so people understand when they are granting a permission that reaches across much of the system.

For everyday Mac users, the practical effect should be fewer casual grants of a powerful setting. Full Disk Access is not the same as giving an app access to a folder or a photo library. It can create a broad data boundary problem, especially when paired with software that can take actions on behalf of the user. CyberOGZ's read is simple: if an app cannot explain in plain language why it needs this permission, users should treat the request as a security decision rather than a setup chore.

Why AI agents changed the stakes

The timing matters because desktop assistants are moving from chat boxes into tools that can read, summarize, move, and act on local information. A useful agent may need context, but broad file visibility can turn one compromised or overreaching app into a systemwide privacy risk. Apple's notice does not accuse a named product or developer, which leaves the policy target broad.

Developers now have a reason to reduce permission requests before Apple forces the issue. Backup, endpoint security, and migration tools may still need wide access, but productivity and communication apps should be able to justify narrower scopes. The next detail to watch is whether Apple pairs the consent change with developer guidance, auditing signals, or new APIs that let apps do useful work without asking users for an all access pass.

Sources

• developer.apple.com

Cover photo by Stefan Coders on Pexels, used under the Pexels License.