Apple将新增macOS全盘访问控制，因AI代理大幅增加文件、邮件、消息等敏感数据泄露风险。
Apple has announced new system-level controls for macOS Full Disk Access, explicitly motivated by the growing capability—and associated risk—of AI agents to read and process sensitive user data across files, emails, messages, and browser history. The update, confirmed in an official Friday statement, mandates finer-grained permission declarations, runtime behavior auditing, and explicit user consent for each data category accessed—moving beyond the current binary allow/deny model. For AI application founders, this ends the era of 'permission-by-default' development. Products relying on broad filesystem scanning—such as cross-app summarizers or intelligent note assistants—must now refactor toward user-selected inputs, local vector caching, or on-device RAG pipelines instead of raw file ingestion. While short-term engineering effort increases by ~20–30%, this shift avoids future compliance penalties and builds trust: when competitors still tout 'full access' as a feature, strict, auditable permission hygiene becomes a defensible product differentiator—especially for B2B or regulated verticals.