Apple Tightens macOS Full Disk Access Controls Amid AI Agent Risks

Apple is introducing stricter controls around the macOS “Full Disk Access” permission, a setting originally designed to let backup utilities read the entire filesystem. The move follows recent allegations that Meta’s Muse app accessed a journalist’s private messages despite the user not granting explicit consent, and a separate finding that a flaw in ChatGPT’s Mac client could expose sensitive data.

In a developer‑focused blog post, Apple warned that some developers are leveraging Full Disk Access in ways that expose “everything on their systems… without users’ full knowledge and understanding.” Going forward, the company will require “very explicit user action” before an app can obtain this level of privilege.

The changes reflect a broader shift: as AI agents become more autonomous on the desktop, the potential attack surface expands dramatically. Apple emphasized that clear, informed consent is essential before granting any software unrestricted file, mail, message, or browsing‑history access.

Why it matters for GPU / AI infrastructure

Cloud GPU providers and on‑premise AI clusters often run workloads that interact with local data through agents or SDKs. Tighter OS‑level permissions mean developers must design data‑access flows that respect explicit user consent, reducing the risk of accidental data leakage and aligning with emerging privacy regulations.