Install little snitch and put it into alert mode and watch as you are overwhelmed with the tens of dozens of outbound connections going out to Apple or iCloud (despite not being signed into iServices) from dozens of system processes.
Why does my MacBook which isn’t enrolled in an mdm ping Apple for mdm config and policies? Why is accountsd phoning home when I’m not signed into an Apple account? Why does the Mac generate absurd amounts of app analytics which you can view in the console app yet can’t delete despite the fact that you turned off all analytics when setting up the machine? Why regardless of if I have WiFi logging enabled or disabled is it still spitting out WiFi velocity reports.
The OS used to be damn near perfect and it’s gone down hill since the first version to introduce iCloud signin. Every new feature they add is something I’ll never be interested in using. Disabling services you don’t want running so they stop phoning home or consuming resources is almost impossible anymore, requiring a dance of booting into recovery mode, disabling every single system protection mechanism, and then booting completely vulnerable into normal mode to then pray that the launchagent gods actually let you turn off mediaanalysisd or if nothing else that sudo has permission (sudo!!) to delete the plist file, and often you get permission denied errors or the process comes back after a reboot. It’s a shit show. The frustrating part is sip and all those things that prevent us from tuning our machines don’t even stop rootkits or the numerous zero days in the wild since it came out