You can't trust macOS Privacy and Security settings

An Eclecticlight analysis reveals a gap in macOS's privacy controls where applications can access protected folders while appearing to have no such permissions in Privacy & Security settings. The vulnerability exploits how the TCC (Transparent Consent and Control) system treats folder access differently depending on whether the user explicitly consents or uses an Open/Save panel. This creates a UX transparency problem where users cannot reliably determine which apps have access to sensitive folders.