What it protects
Windows
Controlled folder access helps protect selected folders against changes by untrusted apps. It is one layer against ransomware-style file modification; it is not a backup, and it cannot undo every kind of compromise. An app can read or behave in other ways even if one save operation is blocked.
A real-world example
A photo editor fails to save into a protected Pictures folder. Before allowing it, inspect the blocked app's exact path and confirm it is the editor you installed from a trusted publisher. Microsoft warns that an allowed app can access protected files; allowing a whole unknown tool because it is convenient increases risk. Its
Windows Security guide explains the current control.
The right response
If the program is untrusted, leave it blocked and investigate. If trusted and necessary, allow only that app through the native control, then test saving. Keep a separate tested backup; a write barrier does not replace recoverable copies.
