This week’s Surveillance Report is a reminder that no operating system is safe—macOS included. In the span of one week, Mac users got hit from three directions: a highly targeted North Korean social engineering campaign using AI-generated videos and a “clickfix” command-running technique, a recurring AMOS infostealer operation that rides whatever trend people are rushing into (this time, a new AI “skill marketplace” ecosystem), and a malvertising campaign that abuses Google Ads to push fake Homebrew install instructions. The common thread is simple: attackers don’t need “zero-days” if they can get you to trust the wrong page and run the wrong command. I also dig into Discord’s mandatory age verification expansion and why it’s a lose-lose: it’s invasive when it works, and it’s laughably bypassable when it doesn’t (yes, a 3D model can trick it). Even if we could do age checks “privately,” the bigger issue is the precedent—an increasingly gatekept internet where access depends on proving who you are. My take is consistent: migrate if you need to (Matrix is great, but not a drop-in Discord replacement), but don’t just run away from the problem. Turn around, fight the policy battle, and defend your digital rights at the source.