> If an app attempts to make a change to these files, and the app is blacklisted by the feature, you’ll get a notification about the attempt So it's allow defa

> If an app attempts to make a change to these files, and the app is blacklisted by the feature, you’ll get a notification about the attempt So it's allow default? That sounds useless. We need a deny default thing. Like Little Snitch but for disk. Every time an app accesses a directory it hasn't accessed before, ask. (Skip asking when files are opened using the system "Open file" dialog for a bit less annoyance.)