Yep, servers (especially headless) are the one case where disabling SIP really can be problematic. But in that case, you should probably just preemptively disa

Yep, servers (especially headless) are the one case where disabling SIP really can be problematic. But in that case, you should probably just preemptively disable it on all your servers and be done with it. In its current form it doesn't provide all that much security anyway... hopefully there are plans to improve it in the future (or else it seems kind of pointless), but even then disabling it won't leave you with any less security than you had before El Capitan. Where I fully agree with you is that Apple really needs a better release process. Releasing security fixes should take hours, not weeks. Even low priority ones.