My understanding is that SIP makes certain locations read-only, like /System, /usr, applications bundled with the OS, etc. You’d turn it off if you had a bunch

My understanding is that SIP makes certain locations read-only, like /System, /usr, applications bundled with the OS, etc. You’d turn it off if you had a bunch of wacky Unix packages from the old days that expected to run from specific paths. I think if you want to just run any code you want, you sudo spctl --master-disable. I’ve never had to use it.