An investigation using a custom macOS app, Insent, reveals that Apple's Privacy & Security settings can misleadingly suggest an app lacks access to protected folders like Documents when it actually does. The macOS TCC system grants folder access based on user intent (e.g., selecting a folder via Open Panel), which circumvents typical consent prompts and disables effective revocation via Settings, requiring terminal commands and a restart to reset permissions. This exposes a discrepancy where Security settings do not accurately reflect an app’s actual access, raising concerns about the reliability of these macOS privacy controls.
https://eclecticlight.co/2026/04/10/why-you-cant-trust-privacy-security/