APPLE says it will tighten the grip on Full Disk Access for macOS AI agents in a forthcoming macOS update, in response to the growing popularity of desktop AI agents such as OpenAI’s Dots, Meta’s Muse, and OpenClaw. The update is presented as a way to ensure users clearly understand the privacy risks before granting an exceptionally broad level of system access.
The piece frames Full Disk Access as originally intended for legitimate utilities like backup tools, which can bypass standard API restrictions, and argues that AI agents’ current demand for this privilege risks exposing personal files, emails, messages, and even browsing histories.
The article cites a recent Muse controversy as a catalyst, describing how Muse allegedly read private iMessages and even generated a push notification based on private conversations. Meta[.]is quoted as denying responsibility, stating that consent was checked if the messages were synchronised. In response, Apple is said to be adding more controls and stricter operational constraints, requiring a very explicit user action to obtain the privilege going forward.
The piece notes some privacy-conscious users have even bought Mac minis to isolate AI agents during work, claiming this has contributed to a Mac mini shortage. It also discusses the broader clash between Apple’s Sandbox privacy model and the demand for global system visibility by AI agents, framing the move as both a privacy safeguard and a strategic measure to protect macOS’s ecosystem.