> We give developers powerful APIs to build incredible capabilities

> Full Disk Access largely sidesteps these controls

That's because you don't really. Just like you don't give users "powerfulf" controls, so instead they have to resort to dumb ones like "Full disk"

For example, if you care about "mail, messages, and even browsing history", why isn't there a subset of "full disk access except for reading mail/messages/browsing history"? Or if vibe code have some basic disk sizing functionality to ask questions about your files, why can't it have a more granular "full disk read only access for file sizes only" so that your vibe coded disk visualization app can't destroy your data or your privacy

> can only do so with very explicit user action.

Which is in the same vein and is mostly useless, just another inconvenient bump