Full Disk Access on a Mac is the digital equivalent of handing someone your house keys, your diary, and the PIN to your safe, then going on vacation. That was a reasonable thing to grant your backup app. Granting it to an autonomous AI agent with opinions? Apple has decided that deserves a second look.
Explicit Consent, Extra Steps
On October 2, Apple said it will add new controls around macOS's Full Disk Access permission, which lets apps reach files, messages, mail, and browsing history. Apple said some developers are using the permission "in ways that could put users at risk, exposing everything on their systems…without users' full knowledge and understanding," and that new controls will mean the access can only be granted with "very explicit user action."
The timing isn't subtle. The move came days after Inc. columnist Jason Aten reported that Meta's Muse AI app on Mac accessed his private messages — a claim Meta disputes — and after Wired reported a flaw in ChatGPT's Mac app that could have exposed sensitive data. Apple's framing: "As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially." (TechCrunch later clarified the change is about informed consent, not an outright ban.)
The Permission Model Wasn't Built for Agents
Desktop permissions were designed for a world where apps did roughly what their name said. An AI agent's whole pitch is that it does whatever you ask — and occasionally whatever a cleverly hidden instruction in an email asks. Broad access plus unpredictable behavior is exactly the combination security folks lose sleep over.
The angle businesses should notice: this isn't just a consumer Mac story. The same question — "what can this AI actually touch?" — applies to agents wired into your CMS, CRM, inbox, and cloud accounts. If Apple feels the need to put a bouncer at the door for personal laptops, your production systems deserve at least a guest list.
Least privilege was good advice in 1975. With AI agents, it's the whole ballgame.
Planning to connect AI agents to your website or business systems? Let's scope exactly what they should and shouldn't be able to reach before you hand over any keys.
Source: TechCrunch