Apple said it is adding new controls to macOS Full Disk Access after reports that Meta’s Muse could surface private Messages content, and it is framing the change as a response to AI-agent risk rather than a single-app complaint. Meta says Muse still requires explicit user permissions, including Full Disk Access and the Messages connector, before it can read that data.
Full Disk Access is a broad macOS grant: Apple says it can let an app reach files, mail, messages, and browsing history. That means an assistant that also has an app connector can stitch together data a user may have thought of as separate, so the issue is the size of the permission boundary, not just the chat app involved.
For Mac environments that are piloting desktop assistants, the exposure sits in the consent model itself. If an AI agent can already act like a system-wide observer, a user-visible opt-in may not be a fine enough control to keep unrelated personal data from becoming visible at once.
Apple says it's tightening macOS 'Full Disk Access' controls due to new risks from AI agents | TechCrunch
Apple says it will add new controls around macOS’s Full Disk Access permission, warning that increasingly capable AI agents make broad access to users’ files, messages, mail, and browsing history riskier.