Someone on stack had a similar hunch. Seems promising. MacOS has gotten more and more proactive about security and permissions... However, I just checked and the entire path to that file (including the file) is owned by me and in my group, with read permissions throughout - and the node-red process is running as me. Unless Apple is doing something funky... which I don't put past them at all.