Apple announced on October 2, 2026 that it will impose additional controls on Full Disk Access (FDA) in macOS, a permission originally designed to let backup apps function properly. The company says some developers have been using FDA to expose everything on a user's system — files, mail, messages, browsing history — without users fully understanding the scope of what they're granting. Communication apps with FDA can also compromise the privacy of people on the other end of a conversation. The core problem is architectural. FDA was built as a blunt instrument: a single toggle that bypasses the granular per-resource privacy controls macOS otherwise enforces. That made it a convenient shortcut for developers who wanted broad access without requesting each permission individually. Apple is now acknowledging that this shortcut has become a liability. The fix, as described, involves requiring "very explicit user action" before granting FDA. Apple hasn't specified the mechanism — it could range from multi-step confirmation dialogs to time-limited grants or periodic re-authorization. The language suggests friction by design: making it harder to grant FDA casually or through dark patterns. Apple explicitly frames the urgency around AI agents. As autonomous software gains the ability to act on a user's behalf — reading files, composing messages, browsing — the consequences of granting system-wide access escalate from privacy risk to active vulnerability. An AI agent with FDA could exfiltrate a user's entire digital life without any per-action consent gate. Apple is pre-positioning before that scenario becomes routine. The policy has a dual edge. For legitimate backup and migration tools — the original FDA use case — additional friction means more user confusion and higher support costs. For accessibility tools and system utilities that depend on broad access, the new controls could break workflows unless Apple provides alternative APIs. The announcement offers no detail on carve-outs or transition timelines. The competitive subtext is worth noting. Apple's privacy controls double as a moat. Every new gate on FDA makes it harder for third-party tools to replicate functionality that Apple's own apps get for free via system-level entitlements. The company frames this as user protection — and it is — but the structural effect is to widen the gap between first-party and third-party capabilities on the Mac. The announcement is a policy signal, not a shipping feature. No version number, no beta timeline, no developer documentation. What Apple has done is declare intent: FDA in its current form is a liability, AI agents make it worse, and the permission model will change. Developers who depend on FDA should start planning now.
