Nothing you said was wrong, but I can’t imagine giving Meta the benefit of the doubt on, well, anything. Fool me once, shame on you. Fool me 137 times…
Either Muse somehow bypassed the MacOS's security or Muse was able to access Messages without explicit permission.
It is Muse's fault, but I also agree that it is MacOS's fault too.