I wonder how they get around GDPR. Normally I'd expect the EU to dish out a pretty hefty fine for this sort of thing, but something tells me Apple lawyers and penpushers has been busy making sure this passes, even though it's technically illegal.
Next, Google will be downloading a database of 2 billion ads to your PC to check against all your private data and decide which ad to show you for anything you search in the future.
And because its all on your PC, no GDPR issues - you are processing your own data.
If you have full sovereignty over your data and your computer and you decide to use software that downloads ads and blasts them to you, at some point even in the best jurisdiction you're responsible for what you install
Edit: I am not making any claims on what constitutes as data only what is considered as processing. And yes, data collection rules under GDPR can be quite absurd
I was talking about the data you collect. Your own data processed on your device, it's fine. Your own data uploaded to be processed? You're agreeing, and it has to be an unambiguous. Sending the data outsids the EU? Explicit checkbox.
Is it absurd? Yes
Fortunately your opinion bears no resemblance to reality, so the absurdity is confined to inside your head (except to the extent it leaks onto message boards, as here)
Ok, but that seems to contradict your original assertion that it doesn't matter where the data is processed. The processes we're talking about run on your computer, processing data about you so that the services your OS provides can use that data to make the services work. That sounds a lot to me like "your own data processed on your device"
It absolutely matters who collects or processes for who must be GDPR compliant.
It's an eternal balancing act because every time Apple implements some new restriction in their OS that prevents apps from doing whatever they want, whenever they want, people get mad at them. But without those restrictions, the ever increasing amount of personal data that is stored on your computer is exposed to the ever increasing number of data slurping applications that you run.
That not being the case is the whole purpose of the per-app sandboxes which macOS has along with TCC. We're not discussing plain Unix permissions alone.
I assume you mean 'many' and not 'make'—this is untrue; you only need to grant FDA if you're trying to access protected areas, like the knowledge graph store.
Granting full disk access to an app that you don't trust not to surreptitiously exfiltrate your data is the kind of user error where the buck stops with PEBCAK.