
>decode·10 min
Gemini Full Access Is Not a macOS Permission
A hidden Gemini Desktop toggle points at whole-disk file access. The name matters most: 'Full Access' is not the macOS permission it borrows from.
securityai-agent-securitymacos
>read more_
> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…

A hidden Gemini Desktop toggle points at whole-disk file access. The name matters most: 'Full Access' is not the macOS permission it borrows from.

Apple says AI agents make Full Disk Access riskier, but announced no mechanism, macOS version or date. The real boundary sits inside the app holding the grant.