Either Muse somehow bypassed the MacOS's security or Muse was able to access Messages without explicit permission. It is Muse's fault, but I also agree that it is MacOS's fault too.