I suspected this would happen when all the AI companies discovered how easy it is to hook into stuff like Messages - really annoying change but there are lots of little disk leaks like this (up until last year AppleScript could edit TCC with very little privilege escalation) so not a bad idea either