So apparently Apple finally noticed what the rest of us have known for years: Full Disk Access on the Mac is a loaded gun that developers have been pointing at themselves and calling "normal." On October 2nd Apple put out a developer note saying it's tightening up how apps get FDA, and the reason they gave wasn't vague corporate mumbling for once — they came right out and said AI agents have "substantially" increased the risk.
Context, because I know not everyone follows this stuff as closely as I apparently do with my Thursday mornings: Full Disk Access is the macOS permission that lets an app read basically everything on your drive. Mail, Messages, browser history, iCloud files, the lot. It was mostly used by backup tools and the odd Spotlight-alternative. You'd grant it once, forget about it, move on with your life.
What changed is that a bunch of AI agent apps now ask for FDA as a matter of course, because reading your whole filesystem is apparently step one of being "helpful." And the thing that seems to have actually lit the fuse under this policy change is the Meta Muse situation — a journalist said the app had read his private Messages, and Meta's response was basically "well, Full Disk Access is opt-in, so." Which, sure, technically true, and also exactly the kind of answer that makes my skin crawl a little. Opt-in doesn't mean much when the opt-in screen is one checkbox buried under six others and the app genuinely does not work without it.
I'll admit my own hands aren't totally clean here. I've got at least three apps on this machine with Full Disk Access that I granted at 11pm without reading what it actually unlocked, because I wanted the thing to just work. A Hazel rule here, a backup tool there. I'd bet most people reading this have the same blind spots sitting in their Privacy & Security settings right now, and most of us have never gone back to check.
Apple hasn't said exactly what the new controls look like yet, or which macOS version they land in; the note is light on specifics, which is very on-brand for them. From what's being reported, the gist is that granting FDA will require something more deliberate than the current click-and-forget flow, something closer to a real, explicit action tied to that specific use, rather than one blanket toggle that covers every file an app might ever want. MacStories already pushed back a bit, pointing out that Apple's own framing (that FDA is "mainly for backups") doesn't really hold up anymore given how many ordinary apps lean on it now, and that tightening it could break workflows for people who use totally mundane tools, not just sketchy AI wrappers.
Here's my actual opinion, not just a recap: this is overdue, and it's also going to be annoying in the short term. Both things are true. I don't think Apple is wrong to do this. An AI agent with FDA can, in theory, read your entire email history, your DMs, your tax PDFs, and summarize all of it for a cloud service you've never heard of, and most users have no real way to audit what's happening after they click Allow once. That's a genuinely different risk profile than "this backup app can see my Documents folder." Treating those the same was always a little lazy on Apple's part, honestly, and it took a journalist getting burned by a Meta product for anyone to say so out loud.
The annoying part is that the people who'll feel this first aren't the shady agent apps, they're the boring utilities that have been doing the right thing for a decade. Every time Apple tightens one of these permission screws, there's a stretch of weeks where perfectly reasonable apps throw confusing prompts at users who have no context for why, and support forums fill up with "why did my backup stop working" threads. I lived through this with the earlier FDA rollout back when it first became mandatory, and with the Photos library permission changes before that. It always gets smoother eventually. The in-between is just rough.
No real date on when any of this ships. I'll believe it when I see the actual UI for it, not before.