Apple Limits Mac Disk Access for AI Agent Risks

Apple says it is tightening macOS Full Disk Access controls because increasingly capable AI agents substantially increase the risk of broad file access. The permission currently allows apps to read sensitive data, including messages, mail, browsing history, and user files. Apple plans new controls so that only users who genuinely intend to grant such extraordinary access can do so, adding friction and clearer warnings along the way. The move reflects growing concern that AI agents, once given system permissions, can act far beyond what a typical user expects. A conventional app might request file access for a narrow feature. An AI agent, however, may use that access to gather context, automate tasks, or interact with other software. If its instructions are ambiguous, manipulated, or poorly constrained, the result could be unintended data exposure or destructive actions. Broad permissions that once seemed manageable can become a serious security boundary problem. Apple's approach appears to follow a familiar privacy pattern: make dangerous permissions harder to grant casually. By adding warnings and friction, the company aims to ensure that Full Disk Access is not approved by habit or confusion. Users may need to take extra steps, and developers may need to explain more clearly why their apps require such access. That can be inconvenient, but it also reduces the chance that an agent receives sweeping control without informed consent. The change also signals how platform makers are responding to the agent era. Operating systems were designed around apps with relatively predictable behavior. AI agents introduce variability, autonomy, and the possibility of prompt injection or goal misgeneralization. Limiting access is one of the few robust defenses, because even a compromised agent cannot read files it was never allowed to reach. For users, the practical advice is simple: grant Full Disk Access sparingly. For developers, the update is a warning that broad permissions will face more scrutiny. As AI agents become more integrated into daily computing, Apple's stricter controls may become a model for other platforms trying to balance capability with security.