My gut tells me that XProtect, SIP, and only allowing software signed by Apple like is the default should be enough for most users to not worry. "Don't just ty

My gut tells me that XProtect, SIP, and only allowing software signed by Apple like is the default should be enough for most users to not worry. "Don't just type in your password" is something everyone using windows or Mac or Linux should be taught. Don't think I'd bother with this, but interested to see it play out. Maybe it'll have positive detection effects that feed back into XProtect