Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems—including files, mail, messages, and even browsing history—without users’ full knowledge and understanding… As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially.