Apple will limit Mac disk access as AI agents ‘substantially’ increase risk

The Verge’s Emma Roth reports Apple will add new limits on Mac Full Disk Access in response to AI-agent risk, after TechCrunch’s earlier reporting. Apple’s Friday update says users who truly want to grant that “extraordinary” access should only be able to do so with “very explicit user action.”

The change follows Inc’s Jason Aten finding Muse somehow knew his message contents without explicit Messages permission on iPhone or Mac. Meta’s Andy Stone said access is “entirely opt-in” via both FDA and a Messages connector. Apple didn’t name Meta, but said developers are using FDA in ways that expose files, mail, messages, and browsing history without full user understanding — and that agent autonomy will make those risks grow “substantially.” No rollout date was given.

We’re reading this as Apple conceding the permission model, not just posting a support note.

FDA exists largely so backup apps can work around finer privacy controls. That design assumes a boring utility with a clear purpose. An agent that chats, shops, and “helps” across your life is a different animal wearing the same badge. “Very explicit user action” is the right direction if it means more than another checkbox users click to make the cute blob work.

Useful desktop agents need filesystem reach. We’re not arguing for locking Macs into helplessness. We are arguing that all-or-nothing disk access was always a blunt instrument, and agents made the bluntness visible. Aten’s experience — surprise knowledge of a Messages thread — is the user-facing failure mode. Meta’s dual-toggle story didn’t settle the room; Apple’s statement is the platform owner answering.

I’m watching for the mechanics: separate prompts per data class, re-auth on upgrade, MDM-visible grants, or just louder warnings. Without a ship date, this is still a press commitment. The industry should treat it as a deadline for designing agents that ask for mail or messages — not the whole disk — by default.

Full Disk Access is a macOS privacy setting that grants an app read access across the system. Apple emphasized it “largely sidesteps” other user privacy controls so backups can function.