Apple tightens macOS access controls amid AI agent security concerns

Apple is implementing stricter guardrails around "Full Disk Access," a macOS permission designed for backup functions, citing escalating security risks from desktop-based AI agents. The move arrives after recent incidents highlighted how these autonomous applications can gain broad access to sensitive user data without sufficient oversight.

What triggered the change#

The policy shift follows a controversial claim that Meta's Muse AI agent read a journalist's private messages without explicit authorization—a report Meta subsequently disputed. Additionally, security researchers identified a vulnerability in ChatGPT's Mac app that could have exposed sensitive information to attackers. These incidents underscore the risks inherent in granting desktop applications broad system permissions.

How Full Disk Access works today#

The macOS feature grants applications permission to read files, email, messages, and browsing history—essentially unfettered access to a user's digital life. While originally intended to support backup operations, AI agents increasingly request this permission to perform their functions. The problem: many users grant these permissions without fully grasping what they're enabling.

"Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems…without users' full knowledge and understanding," Apple explained in a developer announcement.

Apple's new restrictions#

Going forward, Apple will require developers to implement additional friction before users grant full disk access. The goal is to force applications to obtain explicit, intentional approval from users—not just passive permission buried in settings menus.

The company emphasized that as AI agents become more autonomous and capable, the dangers of unrestricted system access will compound. "We are committed to ensuring users clearly understand these risks before granting such access, so they can make informed decisions about their own data and privacy," Apple wrote.

Apple declined to comment on the specific timing and technical details of the changes.