Full Disk Access is a privacy grant
Full Disk Access allows approved apps broader access to protected user data such as Mail, Messages, Safari, Home and Time Machine data. The user must enable it in System Settings.
It is not the same as administrator privileges, and an app cannot legitimately grant it to itself.
It still does not bypass every boundary
System Integrity Protection, the Signed System Volume, sandbox rules, container protections, file permissions and data protection remain separate controls.
A root helper also does not become a universal bypass for privacy controls. Good software asks only when a specific feature genuinely needs broader coverage.
How to review and revoke it
Open System Settings, choose Privacy & Security, then Full Disk Access. Review the developer and whether you still use the feature that required the grant.
Turning access off may require the app to restart. If the app installed background components, review those separately under Login Items & Extensions.
What a transparent utility should show
A trustworthy scan distinguishes checked, blocked and deliberately excluded locations. It never turns an unreadable folder into a false zero or a false all-clear.