Sorry, I meant that’s not desirable behavior that the user might expect. I understand that coding agent tools tend to play fast and loose with access because it’s not their own privacy/security at stake.

This is true for all CLI tools on Mac and Linux (and other operating systems from that era).

Historically, everything you ran was trustworthy.

Android and iOS were invented in an era that does not allow this because the risks became evident by then.