Apple Tightens macOS Full Disk Access Controls as AI Agents Raise Risk

Full Disk Access was designed to allow backups to function properly, Apple said. But the setting gives an app permission to access files, mail, messages and even browsing history, and Apple now says some developers are using it in ways that could put users at risk by exposing everything on their systems without users' full knowledge and understanding.

In Muse's case, the AI optionally allows users to enable Full Disk Access, according to the report. Apple said it will introduce new controls aimed at ensuring that users who "genuinely wish to grant an app this extraordinary level of access" can do so only with "every explicit user action." The company outlined the plan in a blog post aimed at developers.

Apple framed the change as necessary as AI agents become more capable and autonomous. "Addressing this is critical. As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially," Apple wrote. "We are committed to ensuring users clearly understand these risks before granting such access, so they can make informed decisions about their own data and privacy."

The public accounts of the Muse episode remain disputed: the journalist alleged the app read private messages, while Meta disputed that claim, according to the report. Apple's announced controls concern the Full Disk Access setting, and the company said users should be able to grant access only when they explicitly choose to do so.