When I continued it in the browser (e.g. via right clicking it on macOS and then selecting "Open on chatgpt.com"), I was pretty shocked to learn that it actually had (and still has) access to my local file system. I could just prompt it to list files in my home directory, in /Applications etc.
I never have opted into this behavior in the macOS app, nor does there seem to be any way to deactivate it. It's somewhat documented for enterprise accounts [1], and it can be deactivated for those in the admin panel, but this seems like the wrong place: Why should this be possible to activate remotely?
Can anybody confirm this behavior? Maybe I'm missing something, but this seems pretty concerning.
[1] https://learn.chatgpt.com/docs/enterprise/cloud-local-access