The part that matters

Root access, kept on a short leash.

Deleting files the system owns needs privileges, and handing an app root is how cleaners earn their reputation. MacCleaner installs a small privileged helper that exposes a narrow, typed set of operations — no shell commands ever cross the boundary — and it re-validates every single path itself before touching anything.

• A typed XPC contract, not a shell
• The helper rebuilds the safety policy for the asking user and re-checks every path
• Only clients signed by us can connect