Apple Restricts Full Disk Access as AI Agents Pose New Security Risk

Apple is responding to a genuine threat: as AI agents become more autonomous and less predictable, the traditional binary choice of granting or denying full disk access grows riskier. A compromised or misdirected agent could exfiltrate sensitive files at scale. Apple sees the current permission model as insufficient for a computing environment where applications increasingly operate without step-by-step human oversight. The company is redesigning trust assumptions that have held since the early days of macOS sandboxing. The tightening affects not just AI vendors but the entire developer ecosystem, potentially fragmenting what capabilities apps can claim on Mac.