As you know, disabling SIP is not the best idea. I spent several hours one night hacking my macbook that had MS office installed. I created a malicious excel

As you know, disabling SIP is not the best idea. I spent several hours one night hacking my macbook that had MS office installed. I created a malicious excel file following a tutorial, got reverse shell, but couldn't break out of the SIP sandbox. I have serious respect for the Devs of SIP. Windows would be a lot more secure if it had something like SIP that makes it very hard to escalate from a low priv shell to admin.