>nothing short of disabling SIP could uninstall it At the very least, the OS needs to be reinstalled from an off-disk source, and that's assuming you haven't b

>nothing short of disabling SIP could uninstall it At the very least, the OS needs to be reinstalled from an off-disk source, and that's assuming you haven't been hit by something sophisticated enough to put itself in firmware. We're fast approaching an era where you need to trash the hardware. You should never trust an OS install that was ever compromised, and making it more difficult to do so is a good thing in my book.