Apple announced significant changes to macOS Full Disk Access controls, responding to growing concerns about AI agents accessing sensitive user data without proper authorization. The update, expected in macOS 16, introduces granular permission tiers that require explicit user consent before applications can read files in protected directories.
The move comes as AI-powered coding assistants and productivity agents become increasingly capable of autonomously navigating file systems. Security researchers demonstrated several proof-of-concept tools that could exploit overly broad disk access permissions to exfiltrate passwords, financial records, and private communications. These demonstrations raised alarms about the potential for AI agents to access sensitive information without users fully understanding the implications.
Under the new system, applications must request specific access categories rather than blanket disk permissions. Users will see detailed prompts showing exactly which folders an app wants to access, with the ability to revoke permissions at any time through System Preferences. Apple's security team worked closely with developers to ensure legitimate use cases remain functional while closing potential abuse vectors.
The change reflects Apple's broader strategy of balancing innovation with privacy protection. While AI agents offer genuine productivity benefits, the company recognizes that autonomous software requires careful guardrails to prevent unintended data exposure. Industry observers note this positions Apple ahead of other operating system vendors in addressing the unique security challenges posed by autonomous AI systems.
