Apple Is Changing macOS Because of AI Agents. Here's the Security Lesson for Developers.

Apple is introducing additional controls around macOS Full Disk Access, announced in a post on its developer news site on 2 October.

Full Disk Access can expose extremely sensitive information, including files, mail, messages and browsing history. Apple says some developers have been using the permission in ways that could put users at risk, without users' full knowledge and understanding. Going forward, Apple says users who genuinely want to grant this level of access will only be able to do so with very explicit user action.

Apple specifically notes that "as AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially." Apple has not said when the new controls will roll out.

For developers building agents, the lesson is important:

Agent capability ≠ Agent permission

Building an agent that can interact with files and applications is only part of the engineering problem.

Developers also need to think about:

Permissions + User Consent + Least Privilege + Data Access + Authentication + Security Boundaries

Takeaway: A capable AI agent should not automatically receive maximum access to a user's system.