Apple Tightens Full Disk Access on Macs to Rein In AI Agents

AI Summary

Apple has changed how Full Disk Access (FDA) works on macOS specifically to curb abuse by AI agents, Ars Technica reported in October 2026. Full Disk Access is the macOS permission that lets an app read nearly everything on a Mac — messages, mail, backups, browsing data. The flashpoint: Meta argues that FDA is not sufficient for its Muse AI to read users' messages, and Apple disagrees. This is an early fight over who controls the boundary between autonomous AI agents and your data — the operating system maker or the AI company. For Malaysian businesses running AI automation on Macs, it is a signal to audit which tools already hold that permission.

Key Takeaways

• Apple modified Full Disk Access permissions on macOS with the explicit aim of stopping AI agents from abusing the permission, according to Ars Technica's report.
• Meta's Muse AI is built to read users' messages, and Meta argues FDA is not sufficient for that job. Apple rejects the argument — the disagreement is now public.
• The core problem: macOS permissions were designed for apps a human installs for one clear purpose. Agents break that assumption because they act across many tasks over long periods.
• Apple has done this before — its tracking and location restrictions on iOS forced the entire app industry to adapt, and this looks like the agent-era sequel.
• Malaysian firms should audit Full Disk Access grants on company Macs this week and rewrite AI usage policy around least-privilege access before regulators or incidents force the issue.

What Happened

Ars Technica reported in October 2026 that Apple has changed the Full Disk Access permission system on macOS, with the stated goal of curbing abuse from AI agents. Full Disk Access is the macOS setting that grants an app the ability to read protected areas of the disk — Mail, Messages, Time Machine backups, Safari data, and other sensitive locations. Think of it as a master key to the whole office, handed over in one click.

The permission was designed for a specific kind of software: backup utilities, disk repair tools, search indexers. A human installs the app for one obvious job and understands roughly what it touches. AI agents upset that arrangement. An agent — software that plans and executes multi-step tasks on your behalf — often requests Full Disk Access because its job description is effectively "