Right, but it's something that technical users should have a clear path for overriding. SIP at least has a semi-clear path for disabling it (though I couldn't f

Right, but it's something that technical users should have a clear path for overriding. SIP at least has a semi-clear path for disabling it (though I couldn't find any official documentation of it, only forum posts) but the read-only directory thing was definitely really hard to find.