With SIP off it's pretty easy to social engineer your way into the user's system, especially on dev machines - we all install all kinds of stuff that requires s

With SIP off it's pretty easy to social engineer your way into the user's system, especially on dev machines - we all install all kinds of stuff that requires sudo, but until now sudo will let you at literally anything - including replacing core OS files with malware replacements, and most installers are pretty opaque (not that you have the time or inclination to closely examine all installers anyway). The current state of affairs means that users - even non-technical ones - are routinely asked for their admin pwds in everyday use, but every time they enter it they are susceptible to be totally and utterly pwned. Even expert users fall victim when they turn off system safeguards - XcodeGhost being only the most recent example, where only users who actively disabled Gatekeeper/codesign checking were susceptible. It's kind of annoying for power users, but time and time again I think we've proven that power users aren't in any way immune to social engineering or simple blanket malware attack.