The Core of the Announcement
On October 2, 2026, Apple announced that it will introduce additional controls around the Full Disk Access permission in macOS. According to a post titled "Updates to Full Disk Access in macOS" on the company's official developer portal, the risks associated with this level of access are growing substantially as AI agents become increasingly capable and autonomous.
Full Disk Access is one of the broadest permissions on a Mac: it gives an app access to nearly all personal data on the system. Apple says some developers are using the permission in ways that put users at risk. In such cases, a user's files, mail, messages, and browsing history can be exposed to third-party apps without the user's full knowledge and understanding. The company calls the permission an "extraordinary level of access" and stresses that only users who genuinely want it should grant it. The problem is that when some apps request the permission, users may not fully grasp how broad it is: once granted, the app can see not only the documents folder but also mailboxes, private conversations, and browsing history.
"Going forward, Apple says it will introduce additional controls so that users who genuinely wish to grant an app this extraordinary level of access can only do so with 'very explicit user action'." — Apple Developer News, "Updates to Full Disk Access in macOS"
Under the new rules, granting this extraordinary level of access will now require "very explicit user action" from the user. In other words, access will no longer open the moment an app requests it, but only when the user consciously and unambiguously confirms it. Apple ties these measures to the expanding capabilities of AI agents: the more independently agents act, the graver the consequences of misusing powerful permissions like full disk access.
"Apple wrote that addressing the issue is critical because as AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially." — TechCrunch, October 2, 2026
The Chain of Events: Muse and ChatGPT
The announcement came against the backdrop of two incidents that unfolded within days. First, an Inc. columnist wrote that Meta's Muse app for Mac knew the content of his private messages — claiming he had never granted such permission. Meta disputed the claim.
Then Wired reported a flaw in ChatGPT's Mac app: hackers exploiting the vulnerability could have accessed users' sensitive data. Both cases intensified concerns about the deep access AI apps have to the Mac system, and Apple's official statement landed right as those debates peaked.
In its post, Apple did not name any specific developer or app. The company also did not disclose when the new controls will take effect — Apple's official post currently only sets the policy direction.
What "Very Explicit User Action" Means
The key phrase in Apple's announcement is "very explicit user action". According to the company, granting full disk access will now differ from ordinary permission requests: users will have to confirm it deliberately and intentionally, clearly understanding why the permission is being requested and what data — files, mail, messages, browsing history — it will expose. The approach aims to reduce cases where the permission is granted "by accident" or with a hasty tap. Apple considers this strictness necessary precisely in the age of AI agents: as agents increasingly make decisions and act on the user's behalf, broad access permissions matter more than ever.
The Permission's Original Purpose
Full Disk Access was originally designed so backup apps could function properly on the Mac: such programs need access to every corner of the system to create a complete copy of a user's files. According to Apple, some developers today use it in ways that put users at risk — and the company is introducing additional controls to stop exactly that practice. The technical nature of the permission is not changing, but getting it will become harder: users will now have to confirm it deliberately, clearly understanding why it is requested and what data it exposes.
Once the new rules take effect, every app requesting full disk access will require separate, explicit, and informed consent from the user. The change will primarily affect AI agents and utility apps that need deep system access, since those are exactly the ones Apple identified as the source of risk in its announcement. Apple has not disclosed the exact date the new rules take effect — only the policy direction has been announced so far.
