This is your reminder that having SIP turned off allows trivial escalation to root and disabling part of SIP is broadly equivalent, security wise, to disabling the whole thing
@saagar genuine question, how dumb is "i am already fucked if malware runs as my regular user, so idc about escalation or persistence"? it has kind of always been my stance as a casual user but i suspect im missing something