Earlier quoted context omitted.
That's a difficult question because it might limit supply of open machines for users who want the freedom to hack their own stuff. I think it's okay to offer computers that are basically Facebook appliances, but there should always be a toggle somewhere that allows people who know what they're doing to do whatever they please.
Macs do have such a toggle. You can boot from the recovery partition, launch the terminal and issue the `csrutil disable` command. This will turn off all the security features that have been added over the years, including the “Catalina Vista” prompts people were complaining about in September. The reason this requires booting from the recovery partition is to make it impossible for malware to flip the switch and to…
I installed it back in June, so my memory might be a bit hazy, but as far as I’m aware SIP doesn’t control TCC.