Files & Folders access is a macOS privacy permission that lets an app read specific local folders, such as Documents, Desktop, Downloads, or other user-approved paths. It does not automatically grant full access to the entire disk; macOS treats folder visibility as a separate privilege that the user must allow.
This matters because local files often contain credentials, project data, screenshots, and sensitive records. In cyber security, overbroad folder access can turn a harmless tool into a data-exfiltration risk if the app is compromised or misbehaves. Attackers may try to abuse trusted apps, prompt users into approving access, or combine folder access with prompt injection and automation to read, copy, or stage data. Defenders should review which apps have access, remove permissions they do not need, and limit access to the smallest set of folders required for the task.