Apple to add new controls on macOS Full Disk Access, citing AI agent risks
Apple said in a developer blog post that it will add controls around macOS's Full Disk Access permission because increasingly capable AI agents raise the risks of broad file access. It gave no rollout date.
1 / 2
The story, neutrally told
Mixed · 2Apple said on Friday 2 October 2026 that it will introduce new controls around Full Disk Access, a macOS permission that gives an app access to a user's entire system. TechCrunchN “Apple announced that it’s introducing additional controls around a setting called “Full Disk Access” on macOS.” Read at TechCrunch ↗ The VergeLC “Full disk access is a permission on macOS that gives an app access to a user’s entire system.” Read at The Verge ↗ Mixed · 2Apple said the aim is to ensure that users who "genuinely wish to grant an app this extraordinary level of access" can do so only with "very explicit user action". TechCrunchN “users who “genuinely wish to grant an app this extraordinary level of access” can do so only with “very explicit user action.”” Read at TechCrunch ↗ The VergeLC “can only do so with very explicit user action.” Read at The Verge ↗ Mixed · 2In a blog post aimed at developers, Apple said some developers use Full Disk Access in ways that could put users at risk, exposing files, mail, messages and browsing history without users' full knowledge and understanding. TechCrunchN ““Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems…without users’ full knowledge and understanding,” Apple said in a new blog post aimed at developers.” Read at TechCrunch ↗ The VergeLC “including files, mail, messages, and even browsing history” Read at The Verge ↗
Mixed · 2Apple said that as AI agents become more capable and autonomous, the risks of this level of access will "grow substantially", and that it wants users to understand those risks before granting access. TechCrunchN “As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially.” Read at TechCrunch ↗ The VergeLC “the risks associated with this level of access will grow substantially.” Read at The Verge ↗ Mixed · 2Apple said the feature was designed so backup apps can function properly on Mac, and The Verge quotes Apple as saying it "largely sidesteps" the privacy controls offered to users. TechCrunchN “The feature was designed to allow backups to function properly” Read at TechCrunch ↗ The VergeLC “Apple says the feature “largely sidesteps” privacy controls offered to users “to allow backup apps to function properly on Mac.”” Read at The Verge ↗ Mixed · 2The announcement follows a report by Inc. columnist Jason Aten that Meta's Muse AI knew the contents of his private messages even though he said he had not given it permission. TechCrunchN “Inc. columnist Jason Aten reported that Muse knew the content of his private messages — even though he claimed to have not given the AI agent permission.” Read at TechCrunch ↗ The VergeLC “Meta’s Muse AI somehow knew the contents of his messages, despite not giving the chatbot explicit permission” Read at The Verge ↗
Left · 1Meta spokesperson Andy Stone disputed the report, saying access to Messages is "entirely opt-in" and that users must enable both Full Disk Access and the Messages connector for Muse to read Messages content. The VergeLC “Meta spokesperson Andy Stone pushed back on this report, saying access to Messages is “entirely opt-in.””“enable both Full Disk Access and the Messages connector for Muse to be able to read your Messages content.” Read at The Verge ↗ Centre · 1TechCrunch also linked the move to a Wired report that a flaw in ChatGPT's Mac app could have let hackers access sensitive data. TechCrunchN “a Wired report cited that a flaw in ChatGPT’s Mac app could have allowed hackers to access sensitive data.” Read at TechCrunch ↗ Mixed · 2Apple did not say when the change will roll out, and did not immediately respond to requests for comment from TechCrunch or The Verge. The VergeLC “The company doesn’t say when it plans to roll out its update for full disk access.” Read at The Verge ↗ TechCrunchN “Apple did not respond to TechCrunch’s inquiry about the feature change.” Read at TechCrunch ↗
Every sentence links to the reporting it rests on. The pill in front of each says where its sources sit: Left, Centre or Right when one side supplies at least half of them, Mixed when they are evenly split. The number is how many outlets it cites.
Left1 outlet
- Framing
- Short follow-up on Apple's limits, emphasising the risk wording in the headline and including Meta's rebuttal.
- Emphasis
- Meta's response and Apple's note that the permission sidesteps privacy controls; absence of a rollout date.
- Leaves out or plays down
- Does not mention the Wired report on ChatGPT's Mac app.
- Charged language
- “sweeping access”“somehow knew”
- For example
-
“Now Apple is addressing how developers use that sweeping access” — The Verge
Centre1 outlet
- Framing
- Reports Apple's statement as a response to a run of AI-agent privacy concerns, leading with the Muse dispute and adding the Wired report on ChatGPT's Mac app.
- Emphasis
- Context of recent incidents and Apple's quoted warning.
- Leaves out or plays down
- Does not quote Meta's specific rebuttal about the opt-in connector.
- Charged language
- “extraordinary level of access”
- For example
-
“The decision to limit the Mac feature also comes after a Wired report cited that a flaw in ChatGPT’s Mac app could have allowed hackers to access sensitive data.” — TechCrunch
Right0 outlets
No right outlet in our sources has covered this story yet.
What every side reports
- Apple announced new controls on macOS Full Disk Access, citing AI agent risks.
- The change follows Inc. columnist Jason Aten's report about Meta's Muse reading his messages.
- Apple gave no rollout date and did not respond to requests for comment.
Where accounts differ
-
Whether Meta's Muse read messages without permission
- Left
- The Verge quotes Meta's Andy Stone saying access is opt-in and needs both Full Disk Access and the Messages connector enabled.
- Centre
- TechCrunch says Aten claimed he had not given permission and that Meta disputed the claim.
-
Timing of the Muse report relative to Apple's announcement
- Left
- The Verge says the change came "just weeks after" the report.
- Centre
- TechCrunch says Apple's announcement came "days after" the report.
Apple organisation
Says some developers use Full Disk Access in risky ways, that AI agents will raise the risks substantially, and that it will require very explicit user action to grant it.
“We are committed to ensuring users clearly understand these risks before granting such access” — TechCrunch
AI agents topic
Desktop AI agents are presented as the reason for the change, as they can control systems and read files and messages.
“desktop-based AI, which can control things on their systems and read their files and messages.” — TechCrunch
Left1 article
-
Apple will limit Mac disk access as AI agents ‘substantially’ increase risk
Neutral Concise report pairing Apple's warning with Meta's pushback on the Muse claim.
Centre1 article
-
Apple says it’s tightening macOS ‘Full Disk Access’ controls due to new risks from AI agents
Neutral Explains Apple's announcement against the Muse and ChatGPT Mac app security concerns.
Right0 articles
No coverage yet.
- 2 Oct 19:11 First TechCrunchN Apple says it’s tightening macOS ‘Full Disk Access’ controls due to new risks from AI agents
- 2 Oct 21:08 +1h 57m The VergeLC Apple will limit Mac disk access as AI agents ‘substantially’ increase risk
Times are when each article was published, or when we first saw it if the outlet gave no time.