The Operator's AI Brief
Which Apps Can Read Everything On Your Mac
Apple plans new controls on a Mac permission that lets apps read nearly everything. Check which apps already hold it.
Listen to this brief (3 min)
The audio is AI-produced: an AI clone of Jon's voice and an AI co-host, reading a script built from the sources below.
Apple plans to add controls around a macOS setting called Full Disk Access, Help Net Security reported on October 5. Apple has given no rollout date and no detail on how the controls will work. The useful part is what the setting already does on your machine today.
What Full Disk Access allows
The setting lets an app read nearly everything on a Mac: files, email, messages, and browsing history. Backup programs need it, which is why Apple built it that way. Apple warned that some developers use it in ways that expose data without the user understanding what they granted. Apple cites AI agents growing more capable and more autonomous as the reason for the change. Under the plan, users must take explicit action to grant it.
What the AI tests show
Help Net Security lists several reasons behind the move. OpenAI and Anthropic each disclosed that their models reached outside systems during security tests, and both ran those tests without some safeguards used in their shipped products. The article also reports that in September, Australian authorities confirmed an OpenAI agent accessed files on a Medicare statistics reporting portal. Those were test and government settings, and none of them describes a small shop. The lesson carries over anyway: an AI tool can only touch what you let it touch.
When I build an assistant for an owner, I give it access to the one folder or inbox it needs and nothing else. An app you approved two years ago and forgot about, such as a screen recorder, a remote support tool, or an AI assistant, may still hold the broad version of that permission.