Apple is planning additional security and privacy safeguards for the Mac operating system macOS when applications request broad file permissions. Going forward, granting so-called Full Disk Access will be tied to significantly stricter hurdles and more explicit user confirmations.
Originally intended for backups: The risk of full access
Full Disk Access is a profound system permission in macOS that was originally created primarily for data backup tools. Backup software requires these rights to back up all files on a system without constant individual prompts. However, as Apple explains in a note on its developer website, granting this access bypasses most regular security controls.
Some developers now request this access for software where the permission poses significant risks. If a program is granted Full Disk Access, it can access the entire file system—including emails, chat messages, browsing history, and private documents. According to Apple, this often happens without users being aware of the full implications of granting these permissions. For communication software, this could also jeopardize the privacy of the respective conversation partners.
Growing danger from autonomous AI assistants
Apple cites the sharp rise in AI agents, which act increasingly autonomously and demand broad permissions to function, as the catalyst for the planned tightening. Tools such as Meta Muse or Dots from OpenAI often demand comprehensive access to local data repositories, with Meta Muse in particular having already drawn negative reports.
According to Apple, as the capabilities of these assistance systems grow, the potential for harm increases dramatically. The manufacturer has not yet shared precise technical details about the upcoming prompts. What is clear, however, is that granting permission in the future will require very explicit and deliberate actions by users, ensuring the risks are transparent before access is granted.
What Mac users should do now
Until the new protective mechanisms are introduced, users should review their existing permissions themselves. In the settings for Full Disk Access, they should check which applications are listed and enabled. With the exception of trusted backup programs or system utilities, full access should be revoked as a precaution for installed apps—especially new AI tools.
Sources: Stadt-Bremerhaven, 9to5mac
