Apple is tightening Full Disk Access on macOS because always-on agents like Meta's Muse and OpenAI's Dots are being handed the one permission that "largely sidesteps" Apple's regular privacy controls. FDA was carved out for backup apps — Carbon Copy Cloner-class software that genuinely needs block-level reach — and it's now being worn as a general-purpose skeleton key by apps that expose files, mail, messages, and browsing history, plus the privacy of everyone you talk to. The actual change is vague on purpose: "additional controls" and "very explicit user action" before granting FDA. No date given, no API changes specified, no word on granular scoping — so the thread's demand for per-domain access (disk-mapping apps need read-all, not act-on-all) remains unaddressed. Practitioners shipping agents should assume a hardened consent flow and audit whether they need FDA or just narrower TCC permissions. I remember when the riskiest thing a second phone line could do was rack up long-distance charges. Now the modem wants your Mail database. Tim Cook will ship this with a fourteen-sheet dialog, and the stand is sold separately.