Commenting specific to “com.bombich.ccchelper” – you can delete that entry if you’ve upgraded to CCC 7.1+. There is a larger back story here, the two-line summary is that CCC 7.1 introduced a “bundle-based” helper tool, which has different semantics for getting full disk access. Rather than granting access directly to the helper, the bundled helper tool gets FDA via a “chain of responsibility” when FDA is granted to the parent application. So with CCC 7.1+, only “Carbon Copy Cloner” needs to be granted the FDA privilege.