Why it matters
Apple’s October 2 notice explains that Full Disk Access bypasses privacy protections to support functions such as backup, but can also expose files, mail, messages and browsing history to broadly privileged applications. That exposure includes information belonging to other people in a user’s conversations. Apple says additional explicit grant controls are planned; the notice supplies no shipping date. For agent deployments, the immediate control is the permission already granted to the host application, not an assumption that a future operating-system change will constrain it.
My takeaway: Review System Settings → Privacy & Security → Full Disk Access and remove grants that the agent’s task does not require. Test the workflow with narrower access and inspect which application actually holds the permission before expanding its authority.