Apple said Friday it will require very explicit user action to grant macOS applications "full disk access," a permission change prompted by the expanding capabilities of AI agents.
Full disk access lets software ignore macOS privacy boundaries, granting unrestricted visibility into files, messages, mail, and browser history. Apple warned that developers currently exploit this permission to expose user data without clear consent, creating higher stakes as AI models operate more autonomously The Verge.
Automatica reported on Sept 27 that Meta confirmed its Muse chatbot effectively functions as a virtual machine with broad filesystem access, raising questions about agent isolation and secrets management Automatica Press.
Apple's Friday statement echoed those concerns. In an update shared through The Verge, the company noted that "some developers are using Full Disk Access in ways that could put users at risk," explicitly linking the heightened danger to "increasingly capable and autonomous" AI agents The Verge.
The policy shift follows a public dispute over Meta's Muse implementation. On X, Meta spokesperson Andy Stone argued Muse requires users to enable both Full Disk Access and a Messages connector, calling the integration "entirely opt-in" x.com. Independent writer Jason Aten challenged this characterization, stating he used Muse without granting message permissions and still observed message content in the tool's output x.com.
Apple's announcement specifies the new requirement for "very explicit user action" but does not detail how the operating system will distinguish explicit authorization from routine installation dialogs, nor does it provide a timeline for the update or the affected macOS versions The Verge.
At the time of publication, Apple did not respond to The Verge's request for additional comment regarding the rollout schedule or technical specifications of the new controls The Verge.