The article says you need a hardware device to maintain persistence and also recommends using Apple Configurator to “ reinstall bridgeOS on your T2 chip“. So,

The article says you need a hardware device to maintain persistence and also recommends using Apple Configurator to “ reinstall bridgeOS on your T2 chip“. So, a) a T2 hack persists until such reinstall and b) you don’t need a persistent beachhead if you’ve taken the hill and maintain persistence there. This exploit opens the door to that, and you can install keyboard intercepts via the new System Extensions Interface. Did it yesterday myself via an update to Karibiner. Notarization can be disabled by interrupting the network pathway and you can definitely disable SIP after you capture the password. In essence, T2 is the lynchpin that prevents the defeat of other aspects of macOS security.