I wonder what apple does when confronted with software that auto-approves the TCC prompt via a VNC connection to localhost.

If there’s some protections that prevent it from happening via localhost, it feels like the next step is to proxy through another host on the LAN.

Heck, I wonder if someone’s already written an app that’ll connect to VNC, look for any permission prompts, and approve. His agent software could just poke it anytime it thinks it’s blocked.