Apple tightens macOS Full Disk Access controls over AI-agent risks after Meta Muse message dispute
What happened
Apple announced via a developer blog post (reported Oct 2-3 by TechCrunch, The Verge, IANS and others) that it will tighten controls around macOS 'Full Disk Access' (FDA), the permission that lets apps bypass standard privacy controls to read an entire system. Going forward, granting FDA will require 'very explicit user action,' with new, more explicit prompts that spell out exactly which parts of the system a third-party app wants to access. The move follows a public dispute over Meta's Muse AI agent: Inc. columnist Jason Aten reported that Muse referenced a private Apple Messages thread despite his claim that he had granted no message-reading permission. Meta CTO David Singleton and spokesperson Andy Stone disputed the claim, saying Muse can read Messages only if a user manually enables both macOS-level FDA and Muse's separate Messages connector; macOS security researcher Patrick Wardle told Ars Technica that any app with FDA can technically read all non-root files, including chat histories and cookies. Apple did not specify a rollout date for the new controls.
Why it matters & what’s next are part of Pro, along with the audio summary.
Start your free 14-day trialWho’s affected
- META — Muse is a flagship agentic-AI product and a key vector for Meta's consumer AI distribution; stricter macOS permission gates add friction to onboarding and could amplify privacy-trust headwinds around Muse just as adoption is accelerating.
- AAPL — Apple is using a platform-level privacy move; modest positive for its privacy brand positioning, no direct revenue impact; reinforces Apple's gatekeeper leverage over third-party AI agents on macOS.